CVEs.

Latest CVEs

1. 9.8Crit

   CVE-2025-54948 ↗ (opens in a new tab)Known exploited

   A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

   TMTrend Micro· Aug 5, 2025

2. 8.7High

   CVE-2025-54795 ↗ (opens in a new tab)

   Claude Code is an agentic coding tool. In versions below 1.0.20, an error in command parsing makes it possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. This is fixed in version 1.0.20.

   ANAnthropic (Claude)· Aug 5, 2025

3. 7.7High

   CVE-2025-54794 ↗ (opens in a new tab)

   Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead of canonical path comparison, makes it possible to bypass directory restrictions and access files outside the CWD. Successful exploitation depends on the presence of (or ability to create) a directory with the same prefix as the CWD and the ability to add untrusted content into a Claude Code context window. This is fixed in version 0.2.111.

   ANAnthropic (Claude)· Aug 5, 2025

4. 9.8Crit

   CVE-2025-54135 ↗ (opens in a new tab)

   Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions below 1.3.9, If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive MCP files, such as the .cursor/mcp.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

   CUCursor· Aug 5, 2025

5. 9.8Crit

   CVE-2025-54130 ↗ (opens in a new tab)

   Cursor is a code editor built for programming with AI. Cursor allows writing in-workspace files with no user approval in versions less than 1.3.9. If the file is a dotfile, editing it requires approval but creating a new one doesn't. Hence, if sensitive editor files, such as the .vscode/settings.json file don't already exist in the workspace, an attacker can chain a indirect prompt injection vulnerability to hijack the context to write to the settings file and trigger RCE on the victim without user approval. This is fixed in version 1.3.9.

   CUCursor· Aug 5, 2025

6. 5.0Med

   CVE-2025-8341 ↗ (opens in a new tab)

   Grafana is an open-source platform for monitoring and observability. The Infinity datasource plugin, maintained by Grafana Labs, allows visualizing data from JSON, CSV, XML, GraphQL, and HTML endpoints. If the plugin was configured to allow only certain URLs, an attacker could bypass this restriction using a specially crafted URL. This vulnerability is fixed in version 3.4.1.

   GCGrafana Cloud· Aug 4, 2025

7. 2.5Low

   CVE-2025-23290 ↗ (opens in a new tab)

   NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure.

   NVNVIDIA· Aug 2, 2025

8. 5.5Med

   CVE-2025-23285 ↗ (opens in a new tab)

   NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· Aug 2, 2025

9. 7.8High

   CVE-2025-23284 ↗ (opens in a new tab)

   NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering.

   NVNVIDIA· Aug 2, 2025

10. 3.3Low

    CVE-2025-23288 ↗ (opens in a new tab)

    NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit of this vulnerability may lead to Information disclosure.

    NVNVIDIA· Aug 2, 2025

11. 3.3Low

    CVE-2025-23287 ↗ (opens in a new tab)

    NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information disclosure.

    NVNVIDIA· Aug 2, 2025

12. 4.4Med

    CVE-2025-23286 ↗ (opens in a new tab)

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure.

    NVNVIDIA· Aug 2, 2025

13. 7.8High

    CVE-2025-23283 ↗ (opens in a new tab)

    NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

    NVNVIDIA· Aug 2, 2025

14. 7.0High

    CVE-2025-23281 ↗ (opens in a new tab)

    NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure.

    NVNVIDIA· Aug 2, 2025

15. 7.0High

    CVE-2025-23279 ↗ (opens in a new tab)

    NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering.

    NVNVIDIA· Aug 2, 2025

16. 7.1High

    CVE-2025-23278 ↗ (opens in a new tab)

    NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering or denial of service.

    NVNVIDIA· Aug 2, 2025

17. 7.3High

    CVE-2025-23277 ↗ (opens in a new tab)

    NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure.

    NVNVIDIA· Aug 2, 2025

18. 7.8High

    CVE-2025-23276 ↗ (opens in a new tab)

    NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful exploit of this vulnerability may lead to escalation of privileges, denial of service, code execution, information disclosure and data tampering.

    NVNVIDIA· Aug 2, 2025

19. 8.8High

    CVE-2025-54136 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a collaborator accepts a harmless MCP, the attacker can silently swap it for a malicious command (e.g., calc.exe) without triggering any warning or re-prompt. If an attacker has write permissions on a user's active branches of a source repository that contains existing MCP servers the user has previously appr

    CUCursor· Aug 2, 2025

20. 5.3Med

    CVE-2025-54133 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's MCP (Model Context Protocol) deeplink handler, allowing attackers to execute 2-click arbitrary system commands through social engineering attacks. When users click malicious `cursor://anysphere.cursor-deeplink/mcp/install` links, the installation dialog does not show the arguments being passed to the command being run. If a user clicks a malicious deeplink, then examines the installation dialog and clicks through, the full command including the arg

    CUCursor· Aug 2, 2025

21. 7.5High

    CVE-2025-54132 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server through an image fetch after successfully performing a prompt injection. A malicious model (or hallucination/backdoor) might also trigger this exploit at will. This issue requires prompt injection from malicious data (web, image upload, source code) in order to exploit. In that case, it can send se

    CUCursor· Aug 1, 2025

22. 8.8High

    CVE-2025-54131 ↗ (opens in a new tab)

    Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick (`) or $(cmd). If a user has swapped Cursor from its default settings (requiring approval for every terminal call) to an allowlist, an attacker can execute arbitrary command execution outside of the allowlist without user approval. An attacker can trigger this vulnerability if chained with indirect prompt injection. This is fixed in version 1.3.

    CUCursor· Aug 1, 2025

23. 6.8Med

    CVE-2025-6037 ↗ (opens in a new tab)

    Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://developer.hashicorp.com/vault/api-docs/auth/cert#certificate]. In this configuration, an attacker may be able to craft a malicious certificate that could be used to impersonate another user. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

24. 5.7Med

    CVE-2025-6015 ↗ (opens in a new tab)

    Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

25. 6.5Med

    CVE-2025-6014 ↗ (opens in a new tab)

    Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

26. 3.7Low

    CVE-2025-6011 ↗ (opens in a new tab)

    A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enumerate valid usernames for Vault’s Userpass auth method. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

27. 5.3Med

    CVE-2025-6004 ↗ (opens in a new tab)

    Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

28. 9.1Crit

    CVE-2025-6000 ↗ (opens in a new tab)

    A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

29. 7.2High

    CVE-2025-5999 ↗ (opens in a new tab)

    A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 1, 2025

30. 5.5Med

    CVE-2025-23289 ↗ (opens in a new tab)

    NVIDIA Omniverse Launcher for Windows and Linux contains a vulnerability in the launcher logs, where a user could cause sensitive information to be written to the log files through proxy servers. A successful exploit of this vulnerability might lead to information disclosure.

    NVNVIDIA· Jul 31, 2025

31. 6.5Med

    CVE-2025-45769 ↗ (opens in a new tab)

    php-jwt v6.11.0 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.

    FIFirebase· Jul 31, 2025

32. 7.0High

    CVE-2025-25011 ↗ (opens in a new tab)

    An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

    ECElastic Cloud· Jul 30, 2025

33. 7.0High

    CVE-2025-0712 ↗ (opens in a new tab)

    An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

    ECElastic Cloud· Jul 30, 2025

34. 6.1Med

    CVE-2025-8319 ↗ (opens in a new tab)

    the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter

    BNBarracuda Networks· Jul 30, 2025

35. 7.3High

    CVE-2025-52490 ↗ (opens in a new tab)

    An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

    CCCouchbase Capella· Jul 29, 2025

36. 7.8High

    CVE-2025-7675 ↗ (opens in a new tab)

    A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

37. 7.8High

    CVE-2025-7497 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

38. 7.8High

    CVE-2025-6637 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

39. 7.8High

    CVE-2025-6636 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

40. 7.8High

    CVE-2025-6635 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

41. 7.8High

    CVE-2025-6631 ↗ (opens in a new tab)

    A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

42. 7.8High

    CVE-2025-5043 ↗ (opens in a new tab)

    A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

43. 7.8High

    CVE-2025-5038 ↗ (opens in a new tab)

    A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

    AUAutodesk· Jul 29, 2025

44. 6.8Med

    CVE-2025-2179 ↗ (opens in a new tab)

    An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

    PAPalo Alto Networks· Jul 29, 2025

45. 5.4Med

    CVE-2025-3075 ↗ (opens in a new tab)

    The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'elementor-element' shortcode in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only impacts sites with 'Element Caching' enabled.

    ELElementor· Jul 29, 2025

46. 9.8Crit

    CVE-2025-8279 ↗ (opens in a new tab)

    Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query execution

    GIGitLab· Jul 28, 2025

47. 10.0Crit

    CVE-2025-5120 ↗ (opens in a new tab)

    A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code executi

    HFHugging Face· Jul 27, 2025

48. 5.3Med

    CVE-2025-52455 ↗ (opens in a new tab)

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

    SASalesforce· Jul 25, 2025

49. 8.2High

    CVE-2025-52454 ↗ (opens in a new tab)

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

    SASalesforce· Jul 25, 2025

50. 8.2High

    CVE-2025-52453 ↗ (opens in a new tab)

    Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

    SASalesforce· Jul 25, 2025