CVEs.

Latest CVEs

1. 9.8Crit

   CVE-2025-29813 ↗ (opens in a new tab)

   Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.

   ADAzure DevOps· May 8, 2025

2. 6.5Med

   CVE-2025-37730 ↗ (opens in a new tab)

   Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.

   ECElastic Cloud· May 6, 2025

3. 9.8Crit

   CVE-2025-25014 ↗ (opens in a new tab)

   A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.

   ECElastic Cloud· May 6, 2025

4. 8.8High

   CVE-2025-3879 ↗ (opens in a new tab)

   Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18.

   HAHashiCorp (HCP / Terraform Cloud)· May 2, 2025

5. 6.5Med

   CVE-2025-4166 ↗ (opens in a new tab)

   Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in server and audit logs when users submit malformed payloads during secret creation or update operations via the Vault REST API. This vulnerability, identified as CVE-2025-4166, is fixed in Vault Community 1.19.3 and Vault Enterprise 1.19.3, 1.18.9, 1.17.16, 1.16.20.

   HAHashiCorp (HCP / Terraform Cloud)· May 2, 2025

6. 5.5Med

   CVE-2025-23246 ↗ (opens in a new tab)

   NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· May 1, 2025

7. 4.3Med

   CVE-2025-25016 ↗ (opens in a new tab)

   Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validation.

   ECElastic Cloud· May 1, 2025

8. 8.8High

   CVE-2025-23254 ↗ (opens in a new tab)

   NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering.

   NVNVIDIA· May 1, 2025

9. 5.5Med

   CVE-2025-23245 ↗ (opens in a new tab)

   NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service.

   NVNVIDIA· May 1, 2025

10. 7.8High

    CVE-2025-23244 ↗ (opens in a new tab)

    NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· May 1, 2025

11. 7.5High

    CVE-2024-52979 ↗ (opens in a new tab)

    Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.

    ECElastic Cloud· May 1, 2025

12. 7.8High

    CVE-2024-52976 ↗ (opens in a new tab)

    Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. An attacker requires local access and the ability to modify osqueryd configurations.

    ECElastic Cloud· May 1, 2025

13. 5.7Med

    CVE-2024-11994 ↗ (opens in a new tab)

    APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.

    ECElastic Cloud· May 1, 2025

14. 5.4Med

    CVE-2024-11390 ↗ (opens in a new tab)

    Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files. The attacker must have access to the Synthetics app AND/OR have access to write to the synthetics indices.

    ECElastic Cloud· May 1, 2025

15. 5.3Med

    CVE-2025-4144 ↗ (opens in a new tab)

    PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . However, it was found that an attacker could cause the check to be skipped. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/27 https://github.com/cloudflare/workers-oauth-provider/pull/27 Impact: PKCE is a defense-in-depth mechanism against certain kinds of attacks and was an optional extension in OAuth 2.0 which became required in the OAuth 2.1 draft. (Note that the MCP specification requires OAuth 2.1.). This bug completely b

    CLCloudflare· May 1, 2025

16. 6.0Med

    CVE-2025-4143 ↗ (opens in a new tab)

    The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on the allowed list of redirect URIs for the given client registration. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/26 https://github.com/cloudflare/workers-oauth-provider/pull/26 Impact: Under certain circumstances (see below), if a victim had previously authorized with a server built on workers-oath-provider, and an attacker could later trick the victim into visiting a malicious web site, then att

    CLCloudflare· May 1, 2025

17. 7.6High

    CVE-2025-46619 ↗ (opens in a new tab)

    A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.

    CCCouchbase Capella· Apr 30, 2025

18. 8.8High

    CVE-2025-33074 ↗ (opens in a new tab)

    Improper verification of cryptographic signature in Microsoft Azure Functions allows an authorized attacker to execute code over a network.

    MAMicrosoft Azure· Apr 30, 2025

19. 9.8Crit

    CVE-2025-30392 ↗ (opens in a new tab)

    Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 30, 2025

20. 7.5High

    CVE-2025-30391 ↗ (opens in a new tab)

    Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.

    M3Microsoft 365· Apr 30, 2025

21. 8.8High

    CVE-2025-30390 ↗ (opens in a new tab)

    Improper authorization in Azure allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 30, 2025

22. 9.8Crit

    CVE-2025-30389 ↗ (opens in a new tab)

    Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 30, 2025

23. 8.8High

    CVE-2025-21416 ↗ (opens in a new tab)

    Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Apr 30, 2025

24. 4.3Med

    CVE-2025-4095 ↗ (opens in a new tab)

    Registry Access Management (RAM) is a security feature allowing administrators to restrict access for their developers to only allowed registries. When a MacOS configuration profile is used to enforce organization sign-in, the RAM policies are not being applied, which would allow Docker Desktop users to pull down unapproved, and potentially malicious images from any registry.

    DODocker· Apr 29, 2025

25. 5.2Med

    CVE-2025-3911 ↗ (opens in a new tab)

    Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials information and further use it to gain unauthorized access to other systems. Starting with version 4.41.0, Docker Desktop no longer logs environment variables set by the user.

    DODocker· Apr 29, 2025

26. 6.5Med

    CVE-2025-1194 ↗ (opens in a new tab)

    A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected ve

    HFHugging Face· Apr 29, 2025

27. 3.3Low

    CVE-2025-46330 ↗ (opens in a new tab)

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

    SNSnowflake· Apr 29, 2025

28. 3.3Low

    CVE-2025-46329 ↗ (opens in a new tab)

    libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage during the execution of GET/PUT commands. This key by itself does not grant access to any sensitive data without additional access authorizations, and is not logged server-side by Snowflake. This issue has been patched in version 2.2.0.

    SNSnowflake· Apr 29, 2025

29. 7.0High

    CVE-2025-46328 ↗ (opens in a new tab)

    snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the con

    SNSnowflake· Apr 28, 2025

30. 7.0High

    CVE-2025-46327 ↗ (opens in a new tab)

    gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and macOS the Driver verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Driver. This could allow a local attacker with write access to the configuration file

    SNSnowflake· Apr 28, 2025

31. 7.0High

    CVE-2025-46326 ↗ (opens in a new tab)

    snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided file. On Linux and macOS, the Connector verifies that the configuration file can be written to only by its owner. That check was vulnerable to a TOCTOU race condition and failed to verify that the file owner matches the user running the Connector. This could allow a local attacker with write access

    SNSnowflake· Apr 28, 2025

32. 7.3High

    CVE-2025-3224 ↗ (opens in a new tab)

    A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\ProgramData\Docker\config with high privileges. However, this directory often does not exist by default, and C:\ProgramData\ allows normal users to create new directories. By creating a malicious Docker\config folder structure at this location, an attacker can force the privileged update process to delete or manipulate arbitrary sy

    DODocker· Apr 28, 2025

33. 7.7High

    CVE-2025-1908 ↗ (opens in a new tab)

    An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

    GIGitLab· Apr 24, 2025

34. 7.5High

    CVE-2025-0639 ↗ (opens in a new tab)

    An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1.

    GIGitLab· Apr 24, 2025

35. 4.3Med

    CVE-2024-12244 ↗ (opens in a new tab)

    An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1.

    GIGitLab· Apr 24, 2025

36. 4.3Med

    CVE-2025-41423 ↗ (opens in a new tab)

    Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread, allowing any user or attacker to delete posts containing actions created by the Playbooks bot, even without channel access or appropriate permissions.

    MCMattermost Cloud· Apr 24, 2025

37. 7.5High

    CVE-2025-41395 ↗ (opens in a new tab)

    Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate the props used by the RetrospectivePost custom post type in the Playbooks plugin, which allows an attacker to create a specially crafted post with maliciously crafted props and cause a denial of service (DoS) of the web app for all users.

    MCMattermost Cloud· Apr 24, 2025

38. 7.5High

    CVE-2025-35965 ↗ (opens in a new tab)

    Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operation, which allows an attacker to create task items containing an excessive number of actions triggered by specific posts, overloading the server and leading to a denial-of-service (DoS) condition.

    MCMattermost Cloud· Apr 24, 2025

39. 6.5Med

    CVE-2025-1522 ↗ (opens in a new tab)

    PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the database_schema method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-25358.

    POPostHog· Apr 23, 2025

40. 6.5Med

    CVE-2025-1521 ↗ (opens in a new tab)

    PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the slack_incoming_webhook parameter. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-25352.

    POPostHog· Apr 23, 2025

41. 8.0High

    CVE-2025-1520 ↗ (opens in a new tab)

    PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the SQL parser. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the database account. Was ZDI-CAN-25350.

    POPostHog· Apr 23, 2025

42. 6.8Med

    CVE-2025-2703 ↗ (opens in a new tab)

    The built-in XY Chart plugin is vulnerable to a DOM XSS vulnerability. A user with Editor permissions is able to modify such a panel in order to make it execute arbitrary JavaScript.

    GCGrafana Cloud· Apr 23, 2025

43. 2.5Low

    CVE-2025-23253 ↗ (opens in a new tab)

    NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.

    NVNVIDIA· Apr 22, 2025

44. 9.8Crit

    CVE-2025-23251 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

    NVNVIDIA· Apr 22, 2025

45. 9.8Crit

    CVE-2025-23250 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering.

    NVNVIDIA· Apr 22, 2025

46. 9.8Crit

    CVE-2025-23249 ↗ (opens in a new tab)

    NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.

    NVNVIDIA· Apr 22, 2025

47. 4.8Med

    CVE-2025-3841 ↗ (opens in a new tab)

    A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This affects an unknown part of the file jam.py of the component Jinja2 Template Handler. The manipulation of the argument config['template'] leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and

    WIWix· Apr 21, 2025

48. 7.1High

    CVE-2025-3509 ↗ (opens in a new tab)

    A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically allocated ports that become temporarily available, such as during a hot patch upgrade. This means the vulnerability is only exploitable during specific operational conditions, which limits the attack window. Exploitation required either site administrator permissions to enable and configure pre-receiv

    GIGitHub· Apr 17, 2025

49. 8.6High

    CVE-2025-3246 ↗ (opens in a new tab)

    An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown that used `$$..$$` math blocks. Exploitation required access to the target GitHub Enterprise Server instance and privileged user interaction with the malicious elements. This vulnerability affected version 3.16.1 of GitHub Enterprise Server and was fixed in version 3.16.2. This vulnerability was reported via the GitHub Bug Bounty program.

    GIGitHub· Apr 17, 2025

50. 5.3Med

    CVE-2025-3124 ↗ (opens in a new tab)

    A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have access to in the Security Overview in GitHub Advanced Security. The Security Overview was required to be filtered only using the `archived:` filter and all other access controls were functioning normally. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.17 and was fixed in versions 3.13.14, 3.14.11, 3.15.6, and 3.16.2.

    GIGitHub· Apr 17, 2025