13 May 2025

8 results · Clear filters · Feed

• High 8.7
  CVE-2025-4660 Public exploit

  Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access

  A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based a…

  Forescout SecureConnector
  May 13, 2025
• High 7.5
  CVE-2025-30397 Exploited Public exploit EPSS 27%

  Scripting Engine Memory Corruption Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-32709 Exploited Public exploit

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-30400 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.5
  CVE-2025-29969 Public exploit

  MS-EVEN RPC Remote Code Execution Vulnerability

  Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025
• High 7.2
  CVE-2025-4428 Exploited Public exploit EPSS 88%

  Remote Code Execution

  Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

  ivanti Endpoint Manager Mobile Network devices
  May 13, 2025

  KEV May 19, 2025
• High 7.5
  CVE-2025-4396 Public exploit Scanner template

  Relevanssi <= 4.24.4 (Free) and <= 2.27.5 (Premium) - Unauthenticated SQL Injection

  The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4.24.4 (Free) and <= 2.27.5 (Premium) due to insufficient escaping on the user supplie…

  comesio Relevanssi Relevanssi – A Better Search Relevanssi Premium Web / CMS
  May 13, 2025
• High 8.6
  CVE-2024-48766 Public exploit Scanner template EPSS 68%

  NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and…

  NetAlertX NetAlertX
  May 13, 2025