CVEs.

Latest CVEs

1. 7.5High

   CVE-2025-43700 ↗ (opens in a new tab)

   Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025.

   SASalesforce· Jun 10, 2025

2. 5.3Med

   CVE-2025-43699 ↗ (opens in a new tab)

   Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of required permission check. This impacts OmniStudio: before Spring 2025

   SASalesforce· Jun 10, 2025

3. 9.1Crit

   CVE-2025-43698 ↗ (opens in a new tab)

   Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

   SASalesforce· Jun 10, 2025

4. 7.5High

   CVE-2025-43697 ↗ (opens in a new tab)

   Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025

   SASalesforce· Jun 10, 2025

5. 5.4Med

   CVE-2025-3076 ↗ (opens in a new tab)

   The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_text’ parameter in all versions up to, and including, 3.29.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

   ELElementor· Jun 10, 2025

6. 2.1Low

   CVE-2025-5895 ↗ (opens in a new tab)

   A vulnerability was found in Metabase 54.10. It has been classified as problematic. This affects the function parseDataUri of the file frontend/src/metabase/lib/dom.js. The manipulation leads to inefficient regular expression complexity. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The patch is named 4454ebbdc7719016bf80ca0f34859ce5cee9f6b0. It is recommended to apply a patch to fix this issue.

   MCMetabase Cloud· Jun 9, 2025

7. 6.8Med

   CVE-2025-29627 ↗ (opens in a new tab)

   An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication Module

   KEKeeper· Jun 9, 2025

8. 7.8High

   CVE-2025-5036 ↗ (opens in a new tab)

   A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

   AUAutodesk· Jun 2, 2025

9. 5.0Med

   CVE-2025-3454 ↗ (opens in a new tab)

   This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily affects datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources.

   GCGrafana Cloud· Jun 2, 2025

10. 8.3High

    CVE-2025-3260 ↗ (opens in a new tab)

    A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions (v0alpha1, v1alpha1, v2alpha1). Impact: - Viewers can view all dashboards/folders regardless of permissions - Editors can view/edit/delete all dashboards/folders regardless of permissions - Editors can create dashboards in any folder regardless of permissions - Anonymous users with viewer/editor roles are similarly affected Organization isolation boundaries remain intact. The vulnerability only affects dashboar

    GCGrafana Cloud· Jun 2, 2025

11. 4.3Med

    CVE-2025-3611 ↗ (opens in a new tab)

    Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team endpoints, even when explicitly configured with 'No access' to Teams in the System Console.

    MCMattermost Cloud· May 30, 2025

12. 5.4Med

    CVE-2025-3230 ↗ (opens in a new tab)

    Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fails to properly invalidate personal access tokens upon user deactivation, allowing deactivated users to maintain full system access by exploiting access token validation flaws via continued usage of previously issued tokens.

    MCMattermost Cloud· May 30, 2025

13. 4.2Med

    CVE-2025-2571 ↗ (opens in a new tab)

    Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to clear Google OAuth credentials when converting user accounts to bot accounts, allowing attackers to gain unauthorized access to bot accounts via the Google OAuth signup flow.

    MCMattermost Cloud· May 30, 2025

14. 3.1Low

    CVE-2025-1792 ↗ (opens in a new tab)

    Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing authenticated guest users to view metadata about members of public channels via the channel members API endpoint.

    MCMattermost Cloud· May 30, 2025

15. 8.7High

    CVE-2025-1763 ↗ (opens in a new tab)

    An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

    GIGitLab· May 30, 2025

16. 2.3Low

    CVE-2025-48068 ↗ (opens in a new tab)

    Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enabled. The vulnerability only affects local development environments and requires the user to visit a malicious webpage while npm run dev is active. This issue has been patched in versions 14.2.30 and 15.2.2.

    VEVercel· May 30, 2025

17. 3.8Low

    CVE-2025-3913 ↗ (opens in a new tab)

    Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing team administrators without the 'invite user' permission to access and modify team invite IDs via the /api/v4/teams/:teamId/privacy endpoint.

    MCMattermost Cloud· May 29, 2025

18. 7.5High

    CVE-2024-52588 ↗ (opens in a new tab)

    Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery (SSRF). This issue has been patched in version 4.25.2.

    SCStrapi Cloud· May 29, 2025

19. 4.3Med

    CVE-2024-47055 ↗ (opens in a new tab)

    SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks. Insecure Direct Object Reference (IDOR) / Missing Authorization: A missing authorization vulnerability exists in the cloneAction of the segment management. This allows an authenticated user to bypass intended permission restrictions and clone segments even if they lack the necessary permissions to create new ones. MitigationUpdate Mautic to a version that implements proper authoriz

    ACAcquia· May 28, 2025

20. 7.8High

    CVE-2025-23247 ↗ (opens in a new tab)

    NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution.

    NVNVIDIA· May 27, 2025

21. 7.8High

    CVE-2025-24917 ↗ (opens in a new tab)

    In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.

    TETenable· May 23, 2025

22. 7.8High

    CVE-2025-24916 ↗ (opens in a new tab)

    When installing Tenable Network Monitor to a non-default location on a Windows host, Tenable Network Monitor versions prior to 6.5.1 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.

    TETenable· May 23, 2025

23. 5.5Med

    CVE-2025-3580 ↗ (opens in a new tab)

    An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint. The vulnerability can be exploited when: 1. An Organization administrator exists 2. The Server administrator is either: - Not part of any organization, or - Part of the same organization as the Organization administrator Impact: - Organization administrators can permanently delete Server administrator accounts - If the only Server administrator is deleted, the Grafana instan

    GCGrafana Cloud· May 23, 2025

24. 7.5High

    CVE-2024-9163 ↗ (opens in a new tab)

    A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.

    GIGitLab· May 23, 2025

25. 7.5High

    CVE-2024-7803 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS.

    GIGitLab· May 23, 2025

26. 7.4High

    CVE-2025-4366 ↗ (opens in a new tab)

    A request smuggling vulnerability identified within Pingora’s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request execution and potential cache poisoning. Fixed in: https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff Impact: The issue could lead to request smuggling in cases where Pingora’s proxying framework, pingora-proxy, is used for caching allowing an attacker to ma

    CLCloudflare· May 22, 2025

27. 6.5Med

    CVE-2025-0993 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. This could allow an authenticated attacker to cause a denial of service condition by exhausting server resources.

    GIGitLab· May 22, 2025

28. 4.3Med

    CVE-2025-0679 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 17.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Under certain conditions un-authorised users can view full email addresses that should be partially obscured.

    GIGitLab· May 22, 2025

29. 4.3Med

    CVE-2025-0605 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.8 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Group access controls could allow certain users to bypass two-factor authentication requirements.

    GIGitLab· May 22, 2025

30. 6.8Med

    CVE-2024-12093 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

    GIGitLab· May 22, 2025

31. 7.5High

    CVE-2025-4979 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacker may be able to reveal masked or hidden CI variables (that they did not author) in the WebUI, by simply creating their own variable and observing the HTTP response.

    GIGitLab· May 22, 2025

32. 6.5Med

    CVE-2025-3111 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 10.2 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of input validation in the Kubernetes integration could allow an authenticated user to cause denial of service..

    GIGitLab· May 22, 2025

33. 6.5Med

    CVE-2025-2853 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A lack of proper validation in GitLab could allow an authenticated user to cause a denial of service condition.

    GIGitLab· May 22, 2025

34. 4.3Med

    CVE-2025-1110 ↗ (opens in a new tab)

    An issue has been discovered in GitLab CE/EE affecting all versions from 18.0 before 18.0.1. In certain circumstances, a user with limited permissions could access Job Data via a crafted GraphQL query.

    GIGitLab· May 22, 2025

35. 6.1Med

    CVE-2025-4123 ↗ (opens in a new tab)

    A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permissions and if anonymous access is enabled, the XSS will work. If the Grafana Image Renderer plugin is installed, it is possible to exploit the open redirect to achieve a full read SSRF. The default Content-Security-Policy (CSP) in Grafana will block the XSS though the `connect-src` directive.

    GCGrafana Cloud· May 22, 2025

36. 5.4Med

    CVE-2025-20258 ↗ (opens in a new tab)

    A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands into a portion of an email that is sent by the service. A successful exploit could allow the attacker to send emails that contain malicious content to unsuspecting users.

    DSDuo Security· May 21, 2025

37. 4.3Med

    CVE-2025-20255 ↗ (opens in a new tab)

    A vulnerability in client join services of Cisco Webex Meetings could allow an unauthenticated, remote attacker to manipulate cached HTTP responses within the meeting join service. This vulnerability is due to improper handling of malicious HTTP requests to the affected service. An attacker could exploit this vulnerability by manipulating stored HTTP responses within the service, also known as HTTP cache poisoning. A successful exploit could allow the attacker to cause the Webex Meetings service to return incorrect HTTP responses to clients.

    WEWebex· May 21, 2025

38. 6.1Med

    CVE-2025-20250 ↗ (opens in a new tab)

    A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.

    WEWebex· May 21, 2025

39. 6.1Med

    CVE-2025-20247 ↗ (opens in a new tab)

    A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.

    WEWebex· May 21, 2025

40. 6.1Med

    CVE-2025-20246 ↗ (opens in a new tab)

    A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. A vulnerability is due to improper filtering of user-supplied input. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to conduct a cross-site scripting attack against the targeted user.

    WEWebex· May 21, 2025

41. 7.2High

    CVE-2025-22157 ↗ (opens in a new tab)

    This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Server 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center and Server This PrivEsc (Privilege Escalation) vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileged user. Atlassian recommends that Jira Core Data Center and Server and Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of t

    JIJira· May 20, 2025

42. 6.5Med

    CVE-2025-43714 ↗ (opens in a new tab)

    The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents (instead of, for example, rendering them as text inside a code block), which enables HTML injection within most modern graphical web browsers.

    OPOpenAI· May 19, 2025

43. 7.5High

    CVE-2025-2099 ↗ (opens in a new tab)

    A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large number of newline characters. An attacker can exploit this by providing a specially crafted payload, causing high CPU usage and potential application downtime, effectively resulting in a Denial of Service (DoS) scenario.

    HFHugging Face· May 19, 2025

44. 8.7High

    CVE-2025-4600 ↗ (opens in a new tab)

    A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests. This allowed attackers to craft requests that could be misinterpreted by backend servers. The issue was fixed by disallowing stray data after a chunk, and is no longer exploitable. No action is required as Classic Application Load Balancer service after 2025-04-26 is not vulnerable.

    GCGoogle Cloud· May 16, 2025

45. 4.3Med

    CVE-2024-8009 ↗ (opens in a new tab)

    The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students page

    WCWordPress.com (Automattic)· May 15, 2025

46. 9.1Crit

    CVE-2024-6584 ↗ (opens in a new tab)

    The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.

    WCWordPress.com (Automattic)· May 15, 2025

47. 4.8Med

    CVE-2024-12743 ↗ (opens in a new tab)

    The MailPoet WordPress plugin before 5.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

    WCWordPress.com (Automattic)· May 15, 2025

48. 5.9Med

    CVE-2024-10076 ↗ (opens in a new tab)

    The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks

    WCWordPress.com (Automattic)· May 15, 2025

49. 5.6Med

    CVE-2024-10075 ↗ (opens in a new tab)

    The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.

    WCWordPress.com (Automattic)· May 15, 2025

50. 2.7Low

    CVE-2025-2570 ↗ (opens in a new tab)

    Mattermost versions 10.5.x <= 10.5.3, 9.11.x <= 9.11.11 fail to check `RestrictSystemAdmin` setting if user doesn't have access to `ExperimentalSettings` which allows a System Manager to access `ExperimentSettings` when `RestrictSystemAdmin` is true via System Console.

    MCMattermost Cloud· May 15, 2025