Common Vulnerabilities and Exposures (CVE)

CVE-2025-24320

Feb 26, 2026 19:09:22 UTC

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an in...

CVE-2025-21304

Feb 26, 2026 19:09:22 UTC

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-56347

Feb 26, 2026 19:09:22 UTC

IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls.

CVE-2025-20029

Feb 26, 2026 19:09:22 UTC

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Techni...

CVE-2025-21309

Feb 26, 2026 19:09:22 UTC

Windows Remote Desktop Services Remote Code Execution Vulnerability

CVE-2025-30154

Feb 26, 2026 19:09:21 UTC

reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. ...

CVE-2025-21279

Feb 26, 2026 19:09:21 UTC

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21315

Feb 26, 2026 19:09:21 UTC

Microsoft Brokering File System Elevation of Privilege Vulnerability

CVE-2024-51459

Feb 26, 2026 19:09:21 UTC

IBM InfoSphere Information Server 11.7 could allow a local user to execute privileged commands due to the improper handling of permissions.

CVE-2025-21283

Feb 26, 2026 19:09:21 UTC

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21176

Feb 26, 2026 19:09:21 UTC

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

CVE-2025-22228

Feb 26, 2026 19:09:20 UTC

BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.

CVE-2025-21342

Feb 26, 2026 19:09:20 UTC

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2025-21178

Feb 26, 2026 19:09:20 UTC

Visual Studio Remote Code Execution Vulnerability

CVE-2025-24200

Feb 26, 2026 19:09:20 UTC

An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that t...