CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
Threat and Vulnerability Intelligence Database
Example Searches:
CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited
CVE-2025-36580 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection
CVSS: MEDIUM (6.1) EPSS Score: 0.03%
June 10th, 2025 (8 days ago)
|
|
CVE-2025-36578 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Incorrect Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
CVSS: MEDIUM (6.8) EPSS Score: 0.04%
June 10th, 2025 (8 days ago)
|
|
CVE-2025-36577 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
CVSS: MEDIUM (6.1) EPSS Score: 0.03%
June 10th, 2025 (8 days ago)
|
|
CVE-2025-36576 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain a Cross-Site Request Forgery (CSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
CVSS: LOW (2.7) EPSS Score: 0.02% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|
|
CVE-2025-36575 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVSS: HIGH (7.5) EPSS Score: 0.08% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|
|
CVE-2025-36574 |
Description: Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access.
CVSS: HIGH (8.2) EPSS Score: 0.22% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|
|
CVE-2025-35940 |
Description: The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.
CVSS: HIGH (8.1) EPSS Score: 0.11%
June 10th, 2025 (8 days ago)
|
|
CVE-2025-33112 |
Description: IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.
CVSS: HIGH (8.4) EPSS Score: 0.03% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|
|
CVE-2025-33075 |
Description: Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
CVSS: HIGH (7.8) EPSS Score: 0.06% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|
|
CVE-2025-33073 |
Description: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
CVSS: HIGH (8.8) EPSS Score: 0.34% SSVC Exploitation: none
June 10th, 2025 (8 days ago)
|