| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-47794 | Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission | nextcloud | security-advisories | Low | 2.6 | 2025-05-16 14:35:25 | Deep Dive |
| CVE-2025-47793 | Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file | nextcloud | security-advisories | Medium | 4.3 | 2025-05-16 14:31:51 | Deep Dive |
| CVE-2025-47792 | Nextcloud Desktop 3rdparty applications can create share links via socket API | nextcloud | security-advisories | Medium | 5.0 | 2025-05-16 14:13:53 | Deep Dive |
| CVE-2025-47791 | Nextcloud Server's test remote endpoint is not rate limited | nextcloud | security-advisories | Medium | 4.3 | 2025-05-16 14:09:27 | Deep Dive |
| CVE-2025-47790 | Nextcloud Server doesn't request second factor after session timeout | nextcloud | security-advisories | Medium | 6.4 | 2025-05-16 14:02:58 | Deep Dive |
| CVE-2025-3440 | IBM Security Guardium cross-site scripting | IBM | Security Guardium | Medium | 5.5 | 2025-05-15 15:40:35 | Deep Dive |
| CVE-2025-4579 | WP Content Security Plugin <= 2.3 - Unauthenticated Stored Cross-Site Scripting via CSP-Report Fields | dyland | WP Content Security Plugin | High | 7.2 | 2025-05-15 01:59:24 | Deep Dive |
| CVE-2025-0131 | GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK | OPSWAT | MetaDefender Endpoint Security SDK | - | - | 2025-05-14 18:06:46 | Deep Dive |
| CVE-2024-6364 | Server Identity Validation Bypass in Absolute Persistence® | Absolute Security | Absolute Persistence | - | - | 2025-05-13 17:00:07 | Deep Dive |
| CVE-2025-20182 | Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software and IOS XE Software IKEv2 Denial of Service Vulnerability | Cisco | Cisco Adaptive Security Appliance (ASA) Software | High | 8.6 | 2025-05-07 17:18:14 | Deep Dive |
| CVE-2025-46730 | Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack | MobSF | Mobile-Security-Framework-MobSF | Medium | 6.8 | 2025-05-05 19:32:24 | Deep Dive |
| CVE-2025-46335 | Mobile Security Framework (MobSF) Allows Stored Cross Site Scripting (XSS) via malicious SVG Icon Upload | MobSF | Mobile-Security-Framework-MobSF | - | - | 2025-05-05 18:24:00 | Deep Dive |
| CVE-2025-3452 | SecuPress Free <= 2.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation | secupress | SecuPress with Simple SSL – Simple and Performant Security | Medium | 4.3 | 2025-04-29 08:21:44 | Deep Dive |
| CVE-2025-32955 | Harden-Runner Evasion of 'disable-sudo' policy | step-security | harden-runner | Medium | 6.0 | 2025-04-21 20:45:58 | Deep Dive |
| CVE-2025-2517 | Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager | OpenText | ArcSight Enterprise Security Manager | 高危 | - | 2025-04-21 14:26:05 | Deep Dive |
| CVE-2020-36845 | KnowBe4 Security Awareness Training 安全漏洞 | KnowBe4 | Security Awareness Training | Medium | 5.3 | 2025-04-20 00:00:00 | Deep Dive |
| CVE-2020-36844 | KnowBe4 Security Awareness Training 安全漏洞 | KnowBe4 | Security Awareness Training | Medium | 6.1 | 2025-04-20 00:00:00 | Deep Dive |
| CVE-2025-32377 | Rasa Pro Missing Authentication For Voice Connector APIs | RasaHQ | rasa-pro-security-advisories | Medium | 6.5 | 2025-04-18 19:59:32 | Deep Dive |
| CVE-2025-39565 | WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability | Melapress | MelaPress Login Security | Medium | 6.6 | 2025-04-16 12:44:32 | Deep Dive |
| CVE-2025-25023 | IBM Security Guardium information disclosure | IBM | Security Guardium | Medium | 4.9 | 2025-04-09 14:07:13 | Deep Dive |