May 2025

8 results · Clear filters · Feed

• High 8.7
  CVE-2025-4008 Exploited Scanner template EPSS 93%

  Arbitrary Command Injection in Smartbedded MeteoBridge

  The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C. This web interface exposes an endpoint that is vulne…

  Smartbedded MeteoBridge
  May 21, 2025

  KEV Oct 2, 2025
• High 7.5
  CVE-2025-30397 Exploited Public exploit EPSS 27%

  Scripting Engine Memory Corruption Vulnerability

  Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-32709 Exploited Public exploit

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-32706 Exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-32701 Exploited

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.8
  CVE-2025-30400 Exploited Public exploit

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

  Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 13, 2025

  KEV May 13, 2025
• High 7.2
  CVE-2025-4428 Exploited Public exploit EPSS 88%

  Remote Code Execution

  Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

  ivanti Endpoint Manager Mobile Network devices
  May 13, 2025

  KEV May 19, 2025
• High 7.2
  CVE-2025-27920 Exploited

  Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By u…

  Srimax Output Messenger
  May 5, 2025

  KEV May 19, 2025