cirosec

Latest CVEs · RSS

• CVE-2026-8374 2026-10-09 · CVSS 8.5
  Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a
• CVE-2025-41459 2025-07-21 · CVSS 7.8
  Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local a
• CVE-2025-41458 2025-07-21 · CVSS 5.5
  Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s fil
• CVE-2025-2306 2025-05-16 · CVSS 5.9
  An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents with
• CVE-2025-2305 2025-05-16 · CVSS 8.6
  A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, i
• CVE-2025-1865 2025-04-04 · CVSS 8.5
  The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows cre
• CVE-2025-0714 2025-02-17 · CVSS 6.5
  The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of z
• CVE-2025-0543 2025-01-25 · CVSS 8.5
  Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged a
• CVE-2025-0542 2025-01-25 · CVSS 7.8
  Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability
• CVE-2023-7273 2024-10-01 · CVSS 6.8
  Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization header, it is created w
• CVE-2024-6510 2024-09-12 · CVSS 7.8
  Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking.
• CVE-2024-7834 2024-09-04 · CVSS 7.8
  A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on la
• CVE-2024-6689 2024-07-15 · CVSS 7.8
  Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYST