Filter and search through 196,729 vulnerabilities
| CVE ID | Description | CVSS | Priority | Trend | Exploit | Patch |
|---|---|---|---|---|---|---|
| CVE-2025-48425 | Rejected reason: Not used | 0.0 | 0 | Neutral | No |
| No |
| CVE-2025-48424 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48423 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48422 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48421 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48420 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48419 | Rejected reason: Not used | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48387 | ### Impact v3.0.8, v2.1.2, v1.16.4 and below ### Patches Has been patched in 3.0.9, 2.1.3, and 1.16.5 ### Workarounds You can use the ignore option... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48385 | Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full acce... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48374 | ### Summary When using Keycloak as an oidc provider, the clientsecret gets printed into the container stdout logs for an example at container startup.... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48370 | ### Impact The library functions `getUserById`, `deleteUser`, `updateUserById`, `listFactors` and `deleteFactor` did not require the user supplied val... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48059 | ### Impact _What kind of vulnerability is it? Who is impacted?_ This is an advisory for a **potential polynomial Regular Expression Denial of Service... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48058 | ### Impact _What kind of vulnerability is it? Who is impacted?_ This is an advisory for a **potential polynomial Regular Expression Denial of Service... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48054 | ### Impact This is a prototype pollution vulnerability. It impacts users of the `set` function within the Radashi library. If an attacker can control... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-4805 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS.... | 0.0 | 0 | Neutral | No | No |
| CVE-2025-48047 | An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint. | 0.0 | 0 | Neutral | Yes | No |
| CVE-2025-48046 | An authenticated user can disclose the cleartext password of a configured SMTP server via an HTTP GET request to the /config.php endpoint. | 0.0 | 0 | Neutral | Yes | No |
| CVE-2025-48045 | An unauthenticated HTTP GET request to the /client.php endpoint will disclose the default administrator user credentials. | 0.0 | 0 | Neutral | Yes | No |
| CVE-2025-48044 | ### Summary Bypass policies incorrectly authorize requests when their condition evaluates to true but their authorization checks fail and no other pol... | 0.0 | 0 | Neutral | No | Yes |
| CVE-2025-48043 | ### Summary When using **filter** authorization, two edge cases could cause the policy compiler/authorizer to generate a permissive filter: 1. **Byp... | 0.0 | 0 | Neutral | No | Yes |