CVE-2025-32807 - FusionDirectory Path Traversal Vulnerability
CVE ID : CVE-2025-32807
Published : April 11, 2025, 12:15 a.m. | 1 hour, 23 minutes ago
Description : A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32807
Published : April 11, 2025, 12:15 a.m. | 1 hour, 23 minutes ago
Description : A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php.
Severity: 5.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-0126 - Palo Alto Networks GlobalProtect SAML Session Fixation Vulnerability
CVE ID : CVE-2025-0126
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. The SAML login for the PAN-OS® management interface is not affected. Additionally, this issue does not affect Cloud NGFW and all Prisma® Access instances are proactively patched.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-0126
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : When configured using SAML, a session fixation vulnerability in the GlobalProtect™ login enables an attacker to impersonate a legitimate authorized user and perform actions as that GlobalProtect user. This requires the legitimate user to first click on a malicious link provided by the attacker. The SAML login for the PAN-OS® management interface is not affected. Additionally, this issue does not affect Cloud NGFW and all Prisma® Access instances are proactively patched.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-0127 - Palo Alto Networks PAN-OS Command Injection Vulnerability
CVE ID : CVE-2025-0127
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-0127
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-0128 - Palo Alto Networks PAN-OS DoS Vulnerability in SCEP Authentication
CVE ID : CVE-2025-0128
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW is not affected by this vulnerability. Prisma® Access software is proactively patched and protected from this issue.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-0128
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW is not affected by this vulnerability. Prisma® Access software is proactively patched and protected from this issue.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-26335 - Dell PowerProtect Cyber Recovery Insertion of Sensitive Information Into Sent Data Vulnerability
CVE ID : CVE-2025-26335
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-26335
Published : April 11, 2025, 2:15 a.m. | 3 hours, 25 minutes ago
Description : Dell PowerProtect Cyber Recovery, versions prior to 19.18.0.2, contains an Insertion of Sensitive Information Into Sent Data vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Severity: 5.8 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32757 - WordPress CSRF
CVE ID : CVE-2025-32757
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32757
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32758 - Apache HTTP Server XML External Entity (XXE) Injection
CVE ID : CVE-2025-32758
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32758
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32759 - Apache HTTP Server Remote Code Execution
CVE ID : CVE-2025-32759
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32759
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32760 - Apache HTTP Server Cross Site Request Forgery
CVE ID : CVE-2025-32760
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32760
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32761 - Apache HTTP Server Unvalidated User Input
CVE ID : CVE-2025-32761
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32761
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32762 - Apache Jenkins Denial of Service
CVE ID : CVE-2025-32762
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32762
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32763 - Apache HTTP Server Unauthenticated Remote Command Execution Vulnerability
CVE ID : CVE-2025-32763
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32763
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32764 - Adobe Flash Memory Corruption Vulnerability
CVE ID : CVE-2025-32764
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32764
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32765 - Cisco WebEx Meeting Server Vulnerability in Handling Meeting Links
CVE ID : CVE-2025-32765
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32765
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32767 - Apache HTTP Server Cross-Site Request Forgery
CVE ID : CVE-2025-32767
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32767
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32768 - Adobe Flash Unvalidated User Input
CVE ID : CVE-2025-32768
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32768
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32769 - Apache HTTP Server Denial of Service
CVE ID : CVE-2025-32769
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32769
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32770 - Apache HTTP Server Cross-Site Request Forgery
CVE ID : CVE-2025-32770
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32770
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32771 - Apache HTTP Server Cross-Site Request Forgery
CVE ID : CVE-2025-32771
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32771
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32772 - Apache HTTP Server Denial of Service
CVE ID : CVE-2025-32772
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32772
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-32773 - Apache Struts Remote Code Execution
CVE ID : CVE-2025-32773
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-32773
Published : April 11, 2025, 3:15 a.m. | 2 hours, 25 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...