[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424268
> CVE-2025-21246 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21245 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21244 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21243 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21242 [MEDIUM 5.9]
Windows Kerberos Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21241 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+10)
> CVE-2025-21240 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21239 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+10)
> CVE-2025-21238 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21237 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21236 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21235 [HIGH 7.8]
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2022, Microsoft Windows 10 21h2, Microsoft Windows 10 22h2 ... (+5)
> CVE-2025-21234 [HIGH 7.8]
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2022, Microsoft Windows 10 21h2, Microsoft Windows 10 22h2 ... (+5)
> CVE-2025-21233 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21232 [MEDIUM 6.6]
Windows Digital Media Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21231 [HIGH 7.5]
IP Helper Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21230 [HIGH 7.5]
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21229 [MEDIUM 6.6]
Windows Digital Media Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+14)
> CVE-2025-21228 [MEDIUM 6.6]
Windows Digital Media Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21227 [MEDIUM 6.6]
Windows Digital Media Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21226 [MEDIUM 6.6]
Windows Digital Media Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21225 [MEDIUM 5.9]
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 ... (+2)
> CVE-2025-21224 [HIGH 8.1]
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2022, Microsoft Windows 10 21h2, Microsoft Windows 10 22h2 ... (+5)
> CVE-2025-21223 [HIGH 8.8]
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21220 [HIGH 7.5]
Microsoft Message Queuing Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21219 [MEDIUM 4.3]
MapUrlToZone Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+10)
> CVE-2025-21218 [HIGH 7.5]
Windows Kerberos Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+3)
> CVE-2025-21217 [MEDIUM 6.5]
Windows NTLM Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21215 [MEDIUM 4.6]
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21214 [MEDIUM 4.2]
Windows BitLocker Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21213 [MEDIUM 4.6]
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+14)
> CVE-2025-21211 [MEDIUM 6.8]
Secure Boot Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019 ... (+14)
> CVE-2025-21210 [MEDIUM 4.2]
Windows BitLocker Information Disclosure Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21207 [HIGH 7.5]
Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows 10 1809 ... (+7)
> CVE-2025-21202 [MEDIUM 6.1]
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows 10 1507 ... (+10)
> CVE-2025-21193 [MEDIUM 6.5]
Active Directory Federation Server Spoofing Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022 ... (+2)
> CVE-2025-21189 [MEDIUM 4.3]
MapUrlToZone Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS: Microsoft Windows Server 2008, Microsoft Windows Server 2012, Microsoft Windows Server 2016 ... (+15)
> CVE-2025-21187 [HIGH 7.8]
Microsoft Power Automate Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Power Automate For Desktop, Microsoft Power Automate For Desktop, Microsoft Power Automate For Desktop ... (+3)
> CVE-2025-21186 [HIGH 7.8]
Microsoft Access Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Office, Microsoft Access, Microsoft Office Long Term Servicing Channel ... (+1)
> CVE-2025-21178 [HIGH 8.8]
Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Microsoft Visual Studio 2017, Microsoft Visual Studio 2019, Microsoft Visual Studio 2022 ... (+3)
> CVE-2025-21176 [HIGH 8.8]
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9 ... (+2)
> CVE-2025-21173 [HIGH 7.3]
.NET Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9 ... (+2)
> CVE-2025-21172 [HIGH 7.5]
.NET and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9 ... (+2)
> CVE-2025-21171 [HIGH 7.5]
.NET Remote Code Execution Vulnerability
AFFECTED_PRODUCTS: Red Hat Red Hat Enterprise Linux 8, Red Hat Red Hat Enterprise Linux 9
> CVE-2025-0465 [HIGH 7.3]
A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/categories. The manipulation of the argument PostBody.populate leads to deserialization. The attack may be launched remotely. The exploit has been...
> CVE-2024-53996
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2024. Notes: none.
> CVE-2024-13172 [HIGH 7.8]
Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
AFFECTED_PRODUCTS: Ivanti Endpoint Manager, Ivanti Endpoint Manager, Ivanti Endpoint Manager
> CVE-2024-13171 [HIGH 7.8]
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
AFFECTED_PRODUCTS: Ivanti Endpoint Manager, Ivanti Endpoint Manager, Ivanti Endpoint Manager
> CVE-2024-13170 [HIGH 7.5]
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
AFFECTED_PRODUCTS: Ivanti Endpoint Manager, Ivanti Endpoint Manager, Ivanti Endpoint Manager
> CVE-2024-13169 [HIGH 7.8]
An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.
AFFECTED_PRODUCTS: Ivanti Endpoint Manager, Ivanti Endpoint Manager, Ivanti Endpoint Manager