Explore CVE records

HighPublished 15 Jan 2025, 01:50 WIB

CVE-2025-0474

Invoice Ninja PDF Rendering Server Side Request Forgery

Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user. This issue affects Invoice Ninja: from 5.8.56 through 5.11.23.

Excerpt language: en.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

HighPublished 15 Jan 2025, 01:49 WIB

CVE-2025-23042

Gradio Blocked Path ACL Bypass Vulnerability

Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

UnscoredPublished 15 Jan 2025, 01:45 WIB

CVE-2025-23073

API list=globalblocks can reveal IP of autoblock if username and IP are included in the bgtargets parameter

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data. This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension.

Excerpt language: en.

CVSS—KEVNot listedEPSSPresentUpdated17 Oct 2025, 05:47 WIB

Official record

LowPublished 15 Jan 2025, 01:43 WIB

CVE-2024-50349

Git does not sanitize URLs when asking for credentials interactively

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When Git asks for credentials via a terminal prompt (i.e. without using any credential helper), it prints out the host name for which the user is expecte…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:45 WIB

Official record

LowPublished 15 Jan 2025, 01:39 WIB

CVE-2024-52006

Newline confusion in credential helpers can lead to credential exfiltration in git

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. Git defines a line-based protocol that is used to exchange information between Git and Git credential helpers. Some ecosystems (most notably, .NET and no…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:45 WIB

Official record

UnscoredPublished 15 Jan 2025, 01:29 WIB

CVE-2025-23072

XSS in Special:RefreshSpecial

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RefreshSpecial Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - RefreshSpecial Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS—KEVNot listedEPSSPresentUpdated14 Mar 2025, 01:20 WIB

Official record

HighPublished 15 Jan 2025, 01:11 WIB

CVE-2024-50338

Carriage-return character in remote URL allows malicious repository to leak credentials in Git Credential Manager

Git Credential Manager (GCM) is a secure Git credential helper built on .NET that runs on Windows, macOS, and Linux. The Git credential protocol is text-based over standard input/output, and consists of a series of lines of key-value pairs in the format `key=value`. Git's documentation restricts the use of the NUL (`\0…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated15 Jan 2025, 01:35 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21245

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21223

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21238

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21240

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21250

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21417

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21246

Windows Telephony Service Remote Code Execution Vulnerability

Excerpt language: en.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighKEVPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Excerpt language: en.

CVSS7.8v3.1KEVListedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighKEVPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21333

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Excerpt language: en.

CVSS7.8v3.1KEVListedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

CritPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21311

Windows NTLM V1 Elevation of Privilege Vulnerability

Excerpt language: en.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

HighPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21326

Internet Explorer Remote Code Execution Vulnerability

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

MedPublished 15 Jan 2025, 01:04 WIB

CVE-2025-21332

MapUrlToZone Security Feature Bypass Vulnerability

Excerpt language: en.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated10 Jun 2026, 01:30 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage