Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 32088 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28967 1 Gimly 1 Matlab 2025-07-08 7.5 HIGH 9.8 CRITICAL
The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.
CVE-2025-20202 1 Cisco 1 Ios Xe 2025-07-08 N/A 7.4 HIGH
A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access point (AP) Cisco Discovery Protocol (CDP) neighbor reports when they are processed by the wireless controller. An attacker could exploit this vulnerability by sending a crafted CDP packet to an AP. A successful exploit could allow the attacker to cause an unexpected reload of the wireless controller that is managing the AP, resulting in a DoS condition that affects the wireless network.
CVE-2025-47161 1 Microsoft 1 Defender For Endpoint 2025-07-08 N/A 7.8 HIGH
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
CVE-2024-43614 1 Microsoft 1 Defender For Endpoint 2025-07-08 N/A 5.5 MEDIUM
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
CVE-2025-21194 1 Microsoft 54 Surface Go 2 1901, Surface Go 2 1901 Firmware, Surface Go 2 1926 and 51 more 2025-07-08 N/A 7.1 HIGH
Microsoft Surface Security Feature Bypass Vulnerability
CVE-2025-20197 1 Cisco 1 Ios Xe 2025-07-08 N/A 6.7 MEDIUM
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.
CVE-2025-20199 1 Cisco 1 Ios Xe 2025-07-08 N/A 4.6 MEDIUM
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.
CVE-2025-40575 1 Siemens 2 Scalance Lpe9403, Scalance Lpe9403 Firmware 2025-07-08 N/A 4.3 MEDIUM
A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted malicious packet, which leads to a crash of the dcpd process.
CVE-2023-29352 1 Microsoft 8 Remote Desktop Client, Windows 10 1809, Windows 10 21h2 and 5 more 2025-07-07 N/A 6.5 MEDIUM
Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2023-28290 1 Microsoft 1 Remote Desktop App 2025-07-07 N/A 5.3 MEDIUM
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
CVE-2022-26940 1 Microsoft 3 Remote Desktop Client, Windows 11, Windows Server 2022 2025-07-07 4.0 MEDIUM 6.5 MEDIUM
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2024-49105 1 Microsoft 17 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 14 more 2025-07-07 N/A 8.4 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-1669 1 Microsoft 5 Remote Desktop, Remote Desktop Client, Windows 10 and 2 more 2025-07-07 6.5 MEDIUM 8.8 HIGH
Windows Remote Desktop Security Feature Bypass Vulnerability
CVE-2022-24503 1 Microsoft 12 Remote Desktop Client, Windows 10, Windows 11 and 9 more 2025-07-07 5.0 MEDIUM 5.4 MEDIUM
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2022-41121 1 Microsoft 12 Powershell, Remote Desktop Client, Windows 10 and 9 more 2025-07-07 N/A 7.8 HIGH
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-34535 1 Microsoft 9 Remote Desktop Client, Windows 10, Windows 7 and 6 more 2025-07-07 6.8 MEDIUM 8.8 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2024-38131 1 Microsoft 16 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 13 more 2025-07-07 N/A 8.8 HIGH
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
CVE-2021-38665 1 Microsoft 11 Remote Desktop Client, Windows 10, Windows 11 and 8 more 2025-07-07 4.3 MEDIUM 7.4 HIGH
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2022-22015 1 Microsoft 10 Remote Desktop Client, Windows 10, Windows 11 and 7 more 2025-07-07 4.0 MEDIUM 6.5 MEDIUM
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2022-22017 1 Microsoft 3 Remote Desktop Client, Windows 11, Windows Server 2022 2025-07-07 9.3 HIGH 8.8 HIGH
Remote Desktop Client Remote Code Execution Vulnerability