Search
Search Results (313876 CVEs found)
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2014-2374 | 1 Accuenergy | 2 Acuvim Ii, Axm-net | 2025-10-13 | N/A |
The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript. | ||||
CVE-2014-2373 | 1 Accuenergy | 2 Acuvim Ii, Axm-net | 2025-10-13 | N/A |
The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript. | ||||
CVE-2014-0786 | 1 Ecava | 1 Integraxor | 2025-10-13 | N/A |
Ecava IntegraXor before 4.1.4393 allows remote attackers to read cleartext credentials for administrative accounts via SELECT statements that leverage the guest role. | ||||
CVE-2025-62386 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62384 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62392 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-11623 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-59286 | 1 Microsoft | 3 365, 365 Copilot, 365 Copilot Chat | 2025-10-13 | 6.5 Medium |
Copilot Spoofing Vulnerability | ||||
CVE-2025-59272 | 1 Microsoft | 3 365, 365 Copilot, 365 Copilot Chat | 2025-10-13 | 6.5 Medium |
Copilot Spoofing Vulnerability | ||||
CVE-2025-59271 | 2025-10-13 | 8.7 High | ||
Redis Enterprise Elevation of Privilege Vulnerability | ||||
CVE-2025-59252 | 1 Microsoft | 2 365, 365 Copilot | 2025-10-13 | 6.5 Medium |
M365 Copilot Spoofing Vulnerability | ||||
CVE-2025-55321 | 1 Microsoft | 1 Azure Monitor | 2025-10-13 | 8.7 High |
Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an authorized attacker to perform spoofing over a network. | ||||
CVE-2025-59247 | 1 Microsoft | 2 Azure, Azure Playfab | 2025-10-13 | 8.8 High |
Azure PlayFab Elevation of Privilege Vulnerability | ||||
CVE-2025-59246 | 1 Microsoft | 1 Entra Id | 2025-10-13 | 9.8 Critical |
Azure Entra ID Elevation of Privilege Vulnerability | ||||
CVE-2025-59218 | 1 Microsoft | 1 Entra Id | 2025-10-13 | 9.6 Critical |
Azure Entra ID Elevation of Privilege Vulnerability | ||||
CVE-2025-62391 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62390 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62389 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62388 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. | ||||
CVE-2025-62387 | 2025-10-13 | 6.5 Medium | ||
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database. |