CVE-2025-34xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
979 records · Page 6 of 10
AnyDesk 7.0.15 and 9.0.1 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted service path configuration to inject malicious executables that will be run with high-level system permissions.
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordGFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup.
UpdatedGFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files.
UpdatedGFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordCowrie versions prior to 2.9.0 contain a server-side request forgery (SSRF) vulnerability in the emulated shell implementation of wget and curl. In the default emulated shell configuration, these command emulations perform real outbound HTTP requests to attacker-supplied destinations. Because no outbound request rate limiting was enforced, unauthenticated remote attackers could repeatedly invoke t
Updated- CVE-2025-34468: libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE 8.2 High
libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentially achieve remote code execution depending on compiler options and runtime memory protections. Exploitat
Updated - CVE-2025-34467: ZwiiCMS < 13.7.00 Lock Persistence Authenticated DoS Against Administrative Pages 5.3 Medium
ZwiiCMS versions prior to 13.7.00 contain a denial-of-service vulnerability in multiple administrative endpoints due to improper authorization checks combined with flawed resource state management. When an authenticated low-privilege user requests an administrative page, the application returns "404 Not Found" as expected, but incorrectly acquires and associates a temporary lock on the targeted re
Updated This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis candidate has been reserved by a CVE Numbering Authority (CNA).
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordwb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprs_mic_e() located in src/decode_aprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or truncated comment field, the application triggers an unhandled assertion checking for a non-empty
Updatedwb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_byte() located in src/kiss_frame.c. When processing crafted KISS frames that reach the maximum allowed frame length (MAX_KISS_LEN), the function appends a terminating FEND byte without reserving sufficient space in the stack buffer. T
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected record- CVE-2025-34452: Streama Subtitle Download Path Traversal and SSRF Leading to Arbitrary File Write 8.7 High
Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery (SSRF) vulnerabilities in that allow an authenticated attacker to write arbitrary files to the server filesystem. The issue exists in the subtitle download functionality, where user-controlled parameters are used to fetch remote content and construct file paths
Updated rofl0r/proxychains-ng versions up to and including 4.17 and prior to commit cc005b7 contain a stack-based buffer overflow vulnerability in the function proxy_from_string() located in src/libproxychains.c. When parsing crafted proxy configuration entries containing overly long username or password fields, the application may write beyond the bounds of fixed-size stack buffers, leading to memory cor
Updatedmerbanan/rtl_433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parse_rfraw() located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a stack buffer, resulting in memory corruption or a crash. This vulnerability can be exploited to cause
UpdatedGenymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordAVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains.
UpdatedAVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
UpdatedAVideo versions prior to 20.1 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration. Attackers can redirect users to external sites, facilitating phishing attacks.
UpdatedAVideo versions prior to 20.1 are vulnerable to an open redirect flaw due to missing validation of the cancelUri parameter during user login. An attacker can craft a link to redirect users to arbitrary external sites, enabling phishing attacks.
UpdatedAVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video.
UpdatedAVideo versions prior to 20.1 permit any authenticated user to upload comment images to videos owned by other users. The endpoint validates authentication but omits ownership checks, allowing attackers to perform unauthorized uploads to arbitrary video objects.
UpdatedAVideo versions prior to 20.1 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference. The upload functionality verifies authentication but does not enforce ownership checks.
UpdatedAVideo versions prior to 20.1 are vulnerable to an insecure direct object reference (IDOR) that allows any authenticated user to delete media files belonging to other users. The affected endpoint validates authentication but fails to verify ownership or edit permissions for the targeted video.
Updated- CVE-2025-34434: AVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion 9.3 Critical
AVideo versions prior to 20.1 with the ImageGallery plugin enabled is vulnerable to unauthenticated file upload and deletion. Plugin endpoints responsible for managing gallery images fail to enforce authentication checks and do not validate ownership, allowing unauthenticated attackers to upload or delete images associated with any image-based video.
Updated AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The installation timestamp is exposed via a public endpoint, and a derived hash identifier is accessible through unauthenticated API responses, allowing attackers to brute-force the remaining entropy. The recovered salt can
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected recordThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected record1Panel versions 1.10.33 through 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the panel name management functionality. The affected endpoint does not implement CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a panel-name change request; if a victim visits the page while authenticated, the browser incl
Updated1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the web port configuration functionality. The port-change endpoint lacks CSRF defenses such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a port-change request; when a victim visits it while authenticated, the browser includes valid session cookie
UpdatedMailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials,
UpdatedMailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local authenticated user with read access to this file can recover all user passwords and super-admin credentials,
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected record- CVE-2025-34425: MailEnable < 10.54 Reflected XSS in WindowContext Parameter of MAI/compose.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the WindowContext parameter of /Mondo/lang/sys/Forms/MAI/compose.aspx. The WindowContext value is not properly sanitized when processed via a GET request and is reflected within a <script> context in the JavaScript variable window.location, allowing an attacker to break out of the existing script and
Updated MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIDP.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIDP.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIAU.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPC.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIPC.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISP.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISP.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIAM.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISM.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISM.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIMF.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIMF.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISO.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAISO.DLL, which is then load
UpdatedMailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A local attacker with write access to that directory can plant a malicious MEAIPO.DLL, which is then load
UpdatedThis CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected record- CVE-2025-34414: Entrust Instant Financial Issuance (IFI) Legacy Remoting Service .NET Remoting RCE 9.3 Critical
Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to 6.10.5, and prior to 6.11.1 contain an insecure .NET Remoting exposure in the Legacy Remoting Service that is enabled by default. The service registers a TCP remoting channel with SOAP and binary formatters configured at TypeFilterLevel=Full and exposes default ObjectURI endpoin
Updated Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are not emitted by default. Affected deployments omit Content-Security-Policy, Referrer-Policy, Permissions-Policy, Cross-Origin-Embedder-Policy, Cross-Origin-Opener-Policy, and Cross-Origin-Resource-Policy (with CSP delivered via HTML meta elements being inadequate). The absence of
UpdatedThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it identified a vulnerability in a SaaS product that does not require user action.
Updated · Rejected recordThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it identified a vulnerability in a SaaS product that does not require user action.
Updated · Rejected record1Panel versions 1.10.33 - 2.0.15 contain a cross-site request forgery (CSRF) vulnerability in the Change Username functionality available from the settings panel (/settings/panel). The endpoint does not implement CSRF protections such as anti-CSRF tokens or Origin/Referer validation. An attacker can craft a malicious webpage that submits a username-change request; when a victim visits the page whi
Updated- CVE-2025-34409: MailEnable < 10.54 Reflected XSS in Failed Parameter of MAI/AddRecipientsResult.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Failed value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an attacker to break out of existing markup and inject arbitrary script. A remote attacker can supply a cr
Updated - CVE-2025-34408: MailEnable < 10.54 Reflected XSS in Added Parameter of MAI/AddRecipientsResult.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The Added value is not properly sanitized when processed via a GET request and is reflected in the response, allowing an attacker to break out of existing markup and inject arbitrary script. A remote attacker can supply a craf
Updated MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx. The theme value is insufficiently sanitized when processed via a GET request and is reflected in the response, allowing an attacker to break out of an existing iframe context and inject arbitrary script. A remote attacker can supply a craf
Updated- CVE-2025-34406: MailEnable < 10.54 Reflected XSS in Id Parameter of Mobile/ContactDetails.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx. The Id value is not properly sanitized when processed via a GET request and is reflected within a <script> block in the response. By supplying a crafted payload that terminates an existing JavaScript function, inserts attacker-controlled script, and co
Updated This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.
Updated · Rejected record- CVE-2025-34404: MailEnable < 10.54 Reflected XSS in InstanceScope Parameter of CAL/compose.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx. The InstanceScope value is not properly sanitized when processed via a GET request and is reflected inside a <script> block in the JavaScript variable var gInstanceScope. By supplying a crafted payload that terminates the existing
Updated - CVE-2025-34403: MailEnable < 10.54 Reflected XSS in FieldTo Parameter of AddressBook.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The FieldTo value is not properly sanitized when processed via a GET request and is reflected inside a <script> block in the JavaScript variable var fieldTo. By supplying a crafted payload that terminates the existing Finish() function,
Updated - CVE-2025-34402: MailEnable < 10.54 Reflected XSS in FieldCc Parameter of AddressBook.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The FieldCc value is not properly sanitized when processed via a GET request and is reflected inside a <script> block in the JavaScript variable var CCFieldProvided. By supplying a crafted payload that terminates the existing LoadCurAdd
Updated - CVE-2025-34401: MailEnable < 10.54 Reflected XSS in FieldBcc Parameter of AddressBook.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The FieldBcc value is not properly sanitized when processed via a GET request and is reflected inside a <script> block in the JavaScript variable var BCCFieldProvided. By supplying a crafted payload that terminates the existing LoadCur
Updated - CVE-2025-34400: MailEnable < 10.54 Reflected XSS in AddressesTo Parameter of AddressBook.aspx 5.3 Medium
MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx. The AddressesTo value is not properly sanitized when processed via a GET request and is reflected within a <script> block in the response. By supplying a crafted payload that terminates the existing JavaScript function, inserts atta
Updated