NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2025-62454 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 2025-12-09 7.8 LOCAL HIGH NVD
CVE-2025-62221 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. 2025-12-09 7.8 LOCAL HIGH NVD
CVE-2025-61258 An issue was discovered in Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via crafted content-length value mis... 2025-12-09 7.5 NETWORK HIGH NVD
CVE-2025-61078 Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the i... 2025-12-09 6.1 NETWORK MEDIUM NVD
CVE-2025-60024 Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice... 2025-12-09 8.8 NETWORK HIGH NVD
CVE-2025-59923 An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6... 2025-12-09 2.7 NETWORK LOW NVD
CVE-2025-59810 An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS 7.4 all ve... 2025-12-09 6.5 NETWORK MEDIUM NVD
CVE-2025-59808 An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1... 2025-12-09 6.8 NETWORK MEDIUM NVD
CVE-2025-59719 An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4... 2025-12-09 9.8 NETWORK CRITICAL NVD
CVE-2025-59718 A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 t... 2025-12-09 9.8 NETWORK CRITICAL NVD
CVE-2025-59517 Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. 2025-12-09 7.8 LOCAL HIGH NVD
CVE-2025-59516 Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. 2025-12-09 7.8 LOCAL HIGH NVD
CVE-2025-57823 A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthe... 2025-12-09 2.7 NETWORK LOW NVD
CVE-2025-55233 Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally. 2025-12-09 7.8 LOCAL HIGH NVD
CVE-2025-54838 An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate... 2025-12-09 6.8 NETWORK MEDIUM NVD