Archive
1 September 2025
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Critical 9.8CVE-2024-28988 EPSS 42%
SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching …
-
Critical 9.8
In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring …
-
Critical 9.8
In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring ad…
-
Critical 9.8
In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buff…
-
Critical 9.8
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BA…
-
Critical 9.8CVE-2025-6507 EPSS 17%
Deserialization of Untrusted Data in h2oai/h2o-3
A vulnerability in the h2oai/h2o-3 repository allows attackers to exploit deserialization of untrusted data, potentially leading to arbitrary code execution and reading of system files. This issue affects the latest master branch version 3.47.0.99999. The vul…