CVEs.

Latest CVEs

1. 9.3Crit

   CVE-2025-55321 ↗ (opens in a new tab)

   Improper neutralization of input during web page generation ('cross-site scripting') in Azure Monitor allows an unauthorized attacker to perform spoofing over a network.

   MAMicrosoft Azure· Oct 9, 2025

2. 5.5Med

   CVE-2025-4615 ↗ (opens in a new tab)

   An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

   PAPalo Alto Networks· Oct 9, 2025

3. 4.8Med

   CVE-2025-4614 ↗ (opens in a new tab)

   An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

   PAPalo Alto Networks· Oct 9, 2025

4. 6.5Med

   CVE-2025-2934 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticated attacker to create a denial of service condition by configuring malicious webhook endpoints that send crafted HTTP responses.

   GIGitLab· Oct 9, 2025

5. 7.7High

   CVE-2025-11340 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with read-only API tokens to perform unauthorized write operations on vulnerability records by exploiting incorrectly scoped GraphQL mutations.

   GIGitLab· Oct 9, 2025

6. 7.5High

   CVE-2025-10004 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or severely degraded by sending crafted GraphQL queries requesting large repository blobs.

   GIGitLab· Oct 9, 2025

7. 9.9Crit

   CVE-2025-11539 ↗ (opens in a new tab)

   Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due to the fact that the /render/csv endpoint lacked validation of the filePath parameter that allowed an attacker to save a shared object to an arbitrary location that is then loaded by the Chromium process. Instances are vulnerable if: 1. The default token ("authToken") is not changed, or is known to the attacker. 2. The attacker can reach the image renderer endpoint. This issue affects grafana-image-renderer: from 1.0.0 through 4.0.16.

   GCGrafana Cloud· Oct 9, 2025

8. 8.8High

   CVE-2025-11535 ↗ (opens in a new tab)

   MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

   MAMongoDB Atlas· Oct 8, 2025

9. 5.4Med

   CVE-2025-37728 ↗ (opens in a new tab)

   Insufficiently Protected Credentials in the Crowdstrike connector can lead to Crowdstrike credentials being leaked. A malicious user can access cached credentials from a Crowdstrike connector in another space by creating and running a Crowdstrike connector in a space to which they have access.

   ECElastic Cloud· Oct 7, 2025

10. 5.4Med

    CVE-2025-25009 ↗ (opens in a new tab)

    Improper Neutralization of Input During Web Page Generation in Kibana can lead to Stored XSS via case file upload.

    ECElastic Cloud· Oct 7, 2025

11. 9.8Crit

    CVE-2025-59944 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7.

    CUCursor· Oct 3, 2025

12. 2.3Low

    CVE-2025-59829 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission deny rules. If a user explicitly denied Claude Code access to a file and Claude Code had access to a symlink pointing to that file, it was possible for Claude Code to access the file. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.120.

    ANAnthropic (Claude)· Oct 3, 2025

13. 8.8High

    CVE-2025-61593 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive filesystems. This issue is fixed in a commit, 25b418f, but has yet to be released as of October 3, 2025.

    CUCursor· Oct 3, 2025

14. 8.8High

    CVE-2025-61592 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory (<project>/.cursor/cli.json) could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a malicious repository to be vulnerable to Remote Code Execution through a combination of permissive configuration (allowing shell commands) and prompt injection delivered via project-specific Rules (<project>/.cursor/rules/rule.mdc) or other mechanisms. The fix for this issue is currently avail

    CUCursor· Oct 3, 2025

15. 8.8High

    CVE-2025-61591 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.7 and below, when MCP uses OAuth authentication with an untrusted MCP server, an attacker can impersonate a malicious MCP server and return crafted, maliciously injected commands during the interaction process, leading to command injection and potential remote code execution. If chained with an untrusted MCP service via OAuth, this command injection vulnerability could allow arbitrary code execution on the host by the agent. This can then be used to directly compromise the system by executing malicious commands with full user

    CUCursor· Oct 3, 2025

16. 7.5High

    CVE-2025-61590 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings (pretty similar to .vscode/settings.json) for the folders / project. An untitled workspace is automatically created by VS Code (untitled.code-workspace), which contains all the folders and workspace settings from the user's current session, opening up an entire new attack vector if the user has a .code-workspace file in path (either untitled c

    CUCursor· Oct 3, 2025

17. 5.9Med

    CVE-2025-61589 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.6 and below, Mermaid (a to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server through an image fetch after successfully performing a prompt injection. A malicious model (or hallucination/backdoor) might also trigger this exploit at will. This issue requires prompt injection from malicious data (web, image upload, source code) in order to exploit. In that case, it can send sensitive

    CUCursor· Oct 3, 2025

18. 8.7High

    CVE-2025-59536 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Versions before 1.0.111 were vulnerable to Code Injection due to a bug in the startup trust dialog implementation. Claude Code could be tricked to execute code contained in a project before the user accepted the startup trust dialog. Exploiting this requires a user to start Claude Code in an untrusted directory. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to update to the latest version. This issue is fixed in version 1.0.111.

    ANAnthropic (Claude)· Oct 3, 2025

19. 7.8High

    CVE-2025-23355 ↗ (opens in a new tab)

    NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service.

    NVNVIDIA· Oct 1, 2025

20. 7.8High

    CVE-2025-23297 ↗ (opens in a new tab)

    NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges.

    NVNVIDIA· Oct 1, 2025

21. 4.7Med

    CVE-2025-41421 ↗ (opens in a new tab)

    Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local, unprivileged access to a device lacking adequate malware protection to escalate privileges by spoofing the update file path. This may result in unauthorized access to sensitive information.

    TETeamViewer· Oct 1, 2025

22. 8.7High

    CVE-2025-23293 ↗ (opens in a new tab)

    NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.

    NVNVIDIA· Sep 30, 2025

23. 4.6Med

    CVE-2025-23292 ↗ (opens in a new tab)

    NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to partial denial of service (UI component).

    NVNVIDIA· Sep 30, 2025

24. 2.4Low

    CVE-2025-23291 ↗ (opens in a new tab)

    NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action. A successful exploit of this vulnerability may lead to information disclosure.

    NVNVIDIA· Sep 30, 2025

25. 7.5High

    CVE-2025-8014 ↗ (opens in a new tab)

    Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption.

    GIGitLab· Sep 27, 2025

26. 7.5High

    CVE-2025-3193 ↗ (opens in a new tab)

    Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() function in merge.js, which allows constructor.prototype to be written even though doing so throws an error. In the "extreme edge-case" that the resulting error is caught, code injected into the user-supplied search parameter may be exeucted. This is related to but distinct from the issue reported in [CVE-2021-23433](https://security.snyk.io/vuln/SNYK-JS-ALGOLIASEARCHHELPER-1570421). **NOTE:** This vulnerability is not exploitable in the default configuration of I

    ALAlgolia· Sep 27, 2025

27. 8.7High

    CVE-2025-10657 ↗ (opens in a new tab)

    In a hardened Docker environment, with Enhanced Container Isolation ( ECI https://docs.docker.com/enterprise/security/hardened-desktop/enhanced-container-isolation/ ) enabled, an administrator can utilize the command restrictions feature https://docs.docker.com/enterprise/security/hardened-desktop/enhanced-container-isolation/config/#command-restrictions to restrict commands that a container with a Docker socket mount may issue on that socket. Due to a software bug, the configuration to restrict commands was ignored when passed to ECI, allowing any command to be executed on the socket. This gr

    DODocker· Sep 26, 2025

28. 6.5Med

    CVE-2025-5069 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's project.

    GIGitLab· Sep 26, 2025

29. 7.5High

    CVE-2025-11042 ↗ (opens in a new tab)

    An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condition while using specific GraphQL queries.

    GIGitLab· Sep 26, 2025

30. 5.3Med

    CVE-2025-10868 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs.

    GIGitLab· Sep 26, 2025

31. 7.7High

    CVE-2025-9958 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, that could have allowed Guest users to access sensitive information stored in virtual registry configurations.

    GIGitLab· Sep 26, 2025

32. 9.6Crit

    CVE-2025-9642 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover.

    GIGitLab· Sep 26, 2025

33. 8.8High

    CVE-2025-7691 ↗ (opens in a new tab)

    A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access to additional system capabilities.

    GIGitLab· Sep 26, 2025

34. 7.2High

    CVE-2025-10871 ↗ (opens in a new tab)

    An issue has been discovered in GitLab EE affecting all versions from 16.6 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1. Project Maintainers can exploit a vulnerability where they can assign custom roles to users with permissions exceeding their own, effectively granting themselves elevated privileges.

    GIGitLab· Sep 26, 2025

35. 6.5Med

    CVE-2025-10867 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 18.1 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to create a denial-of-service condition by exploiting an unprotected GraphQL API through repeated requests.

    GIGitLab· Sep 26, 2025

36. 7.5High

    CVE-2025-10858 ↗ (opens in a new tab)

    An issue was discovered in GitLab CE/EE affecting all versions before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that allows unauthenticated users to cause a Denial of Service (DoS) condition while uploading specifically crafted large JSON files.

    GIGitLab· Sep 26, 2025

37. 9.3Crit

    CVE-2025-11005 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.

    PAPalo Alto Networks· Sep 25, 2025

38. 7.7High

    CVE-2025-59828 ↗ (opens in a new tab)

    Claude Code is an agentic coding tool. Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions 2.0+, Yarn plugins are auto-executed when running yarn --version. This could lead to a bypass of the directory trust dialog in Claude Code, as plugins would be executed prior to the user accepting the risks of working in an untrusted directory. Users running Yarn Classic were unaffected by this issue. This issue has been fixed in version 1.0.39. Users on standard Claude Code auto-update will have received this fix automatically. Users performing manual updates are advised to up

    ANAnthropic (Claude)· Sep 24, 2025

39. 7.5High

    CVE-2025-57325 ↗ (opens in a new tab)

    rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of rollbar v2.26.4 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.

    RORollbar· Sep 24, 2025

40. 7.6High

    CVE-2025-59305 ↗ (opens in a new tab)

    Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all, backgroundMigrations.status, and backgroundMigrations.retry.

    LALangfuse· Sep 24, 2025

41. 7.3High

    CVE-2025-52907 ↗ (opens in a new tab)

    Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

    PAPalo Alto Networks· Sep 24, 2025

42. 9.3Crit

    CVE-2025-52906 ↗ (opens in a new tab)

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

    PAPalo Alto Networks· Sep 24, 2025

43. 7.8High

    CVE-2025-23354 ↗ (opens in a new tab)

    NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.

    NVNVIDIA· Sep 24, 2025

44. 7.8High

    CVE-2025-23353 ↗ (opens in a new tab)

    NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, Information disclosure, and data tampering.

    NVNVIDIA· Sep 24, 2025

45. 7.8High

    CVE-2025-23349 ↗ (opens in a new tab)

    NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Sep 24, 2025

46. 7.8High

    CVE-2025-23348 ↗ (opens in a new tab)

    NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Sep 24, 2025

47. 3.3Low

    CVE-2025-23346 ↗ (opens in a new tab)

    NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference. A successful exploit of this vulnerability may lead to a limited denial of service.

    NVNVIDIA· Sep 24, 2025

48. 3.3Low

    CVE-2025-23340 ↗ (opens in a new tab)

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service.

    NVNVIDIA· Sep 24, 2025

49. 7.8High

    CVE-2025-23339 ↗ (opens in a new tab)

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.

    NVNVIDIA· Sep 24, 2025

50. 5.5Med

    CVE-2025-23338 ↗ (opens in a new tab)

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm where a user may cause an out-of-bounds write by running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service.

    NVNVIDIA· Sep 24, 2025