WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product orc✕
Overview 1,321 matches · 138 in Waratek scope · 52 protected · 35 exploited · 25 CISA KEV · 86 public PoC · 39 EPSS ≥ 0.5
1,321matches 138in Waratek scope10.4% 52protected3.9% 35exploited2.6% 25CISA KEV1.9% 86public PoC6.5% 39EPSS ≥ 0.53.0%
Protected by Waratek 52 3.9% Rule in development 0 0.0% Mitigation candidate 13 1.0% No exploit published 73 5.5% Outside Waratek scope 33 2.5% Not applicable 1,150 87.1% Withdrawn CVE 0 0.0%
Critical 138 10.4% High 646 48.9% Medium 493 37.3% Low 44 3.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 52 3.9% partly blocked 0 0.0% not blocked 1,269 96.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 35 2.6% Working exploit published 49 3.7% Proof of concept only 53 4.0% Forecast only 8 0.6% No public exploit 1,176 89.0%
split by peak 146 / year
Not applicable: 1,150Outside Waratek scope: 33No exploit published: 73Mitigation candidate: 13Protected by Waratek: 52 Low: 44Medium: 493High: 646Critical: 138 not blocked: 1,269blocked by ARMR today: 52 No public exploit: 1,176Forecast only: 8Proof of concept only: 53Working exploit published: 49Exploited: 35
19971 Not applicable1 Low1 not blocked1 No public exploit1 19980 19990 20000 20010 20021 Not applicable1 Medium1 not blocked1 No public exploit1 20035 Protected by Waratek1 No exploit published3 Not applicable1 High4 Medium1 blocked by ARMR today1 not blocked4 No public exploit5 20045 No exploit published1 Not applicable4 High3 Medium2 not blocked5 Working exploit published2 No public exploit3 200512 Not applicable12 High9 Medium2 Low1 not blocked12 Working exploit published8 No public exploit4 20065 Outside Waratek scope1 Not applicable4 High2 Medium2 Low1 not blocked5 Working exploit published2 No public exploit3 20078 Outside Waratek scope1 Not applicable7 High5 Medium3 not blocked8 No public exploit8 200810 Mitigation candidate1 Not applicable9 High6 Medium4 not blocked10 Working exploit published5 No public exploit5 200912 Not applicable12 Critical1 High4 Medium5 Low2 not blocked12 Working exploit published2 No public exploit10 201013 Not applicable13 High2 Medium11 not blocked13 No public exploit13 20115 Not applicable5 High3 Medium2 not blocked5 Working exploit published2 No public exploit3 201210 No exploit published1 Not applicable9 High3 Medium7 not blocked10 Working exploit published4 No public exploit6 20139 Protected by Waratek3 Mitigation candidate1 Not applicable5 High2 Medium7 blocked by ARMR today3 not blocked6 Working exploit published4 No public exploit5 201412 Protected by Waratek1 Not applicable11 Critical2 High2 Medium7 Low1 blocked by ARMR today1 not blocked11 Exploited3 Working exploit published1 No public exploit8 201518 Protected by Waratek1 No exploit published3 Not applicable14 Critical1 High5 Medium11 Low1 blocked by ARMR today1 not blocked17 Exploited1 Working exploit published3 No public exploit14 201630 No exploit published1 Not applicable29 Critical5 High16 Medium8 Low1 not blocked30 Exploited2 Working exploit published1 No public exploit27 201759 Protected by Waratek2 No exploit published1 Not applicable56 Critical8 High27 Medium21 Low3 blocked by ARMR today2 not blocked57 Working exploit published4 No public exploit55 2018122 Protected by Waratek2 Mitigation candidate1 No exploit published5 Outside Waratek scope3 Not applicable111 Critical13 High61 Medium45 Low3 blocked by ARMR today2 not blocked120 Exploited3 Working exploit published4 Proof of concept only2 Forecast only2 No public exploit111 2019144 Protected by Waratek18 No exploit published6 Outside Waratek scope6 Not applicable114 Critical17 High62 Medium57 Low8 blocked by ARMR today18 not blocked126 Exploited1 Working exploit published1 Proof of concept only3 Forecast only2 No public exploit137 2020146 Protected by Waratek16 Mitigation candidate7 No exploit published13 Outside Waratek scope4 Not applicable106 Critical13 High77 Medium44 Low12 blocked by ARMR today16 not blocked130 Exploited4 Working exploit published3 Proof of concept only2 No public exploit137 2021144 Protected by Waratek4 Mitigation candidate2 No exploit published16 Outside Waratek scope7 Not applicable115 Critical16 High75 Medium52 Low1 blocked by ARMR today4 not blocked140 Exploited5 Working exploit published1 Proof of concept only5 Forecast only3 No public exploit130 2022145 Protected by Waratek3 No exploit published7 Outside Waratek scope4 Not applicable131 Critical14 High60 Medium68 Low3 blocked by ARMR today3 not blocked142 Exploited3 Working exploit published2 Proof of concept only7 No public exploit133 2023103 Mitigation candidate1 No exploit published4 Outside Waratek scope1 Not applicable97 Critical8 High56 Medium39 not blocked103 Exploited5 Proof of concept only3 Forecast only1 No public exploit94 202472 No exploit published1 Outside Waratek scope5 Not applicable66 Critical7 High39 Medium26 not blocked72 Proof of concept only7 No public exploit65 2025104 No exploit published2 Outside Waratek scope1 Not applicable101 Critical14 High58 Medium29 Low3 not blocked104 Exploited1 Proof of concept only19 No public exploit84 2026126 Protected by Waratek1 No exploit published9 Not applicable116 Critical19 High65 Medium39 Low3 blocked by ARMR today1 not blocked125 Exploited7 Proof of concept only5 No public exploit114
1999200220052008201120142017202020232026
1,321 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 14 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-32643 High 2026-05-13 Not applicable No public exploit A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least the Certificate Manager role can modify configuration objects that allow running arbitrary commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-24464 Medium 2026-05-13 Not applicable No public exploit When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-45321 Critical 2026-05-12 Not applicable Exploited On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry. The publishes were authenticated via the legitimate GitHub Actions OIDC trusted-publisher binding for TanStack/router, but the publish workflow itself was not modified. The attacker chained three known vulnerability classes — a pull_request_target "Pwn Request" misconfiguration, GitHub Actions cache poisoning across the fork↔base trust boundary, and runtime memory extraction of the OIDC token from the Actions runner process — to publish credential-stealing malware under a trusted identity. Each affected package received exactly two malicious versions, published a few minutes apart.
CVE-2026-31221 High 2026-05-12 Not applicable No public exploit PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability (CWE-502) in the checkpoint loading mechanism. The LightningModule.load_from_checkpoint() method, which is commonly used to load saved model states, internally calls torch.load() without setting the security-restrictive weights_only=True parameter. This default behavior allows the deserialization of arbitrary Python objects via the Pickle module. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, leading to arbitrary code execution on the victim's system when the file is loaded.
CVE-2026-31431 High 2026-04-22 Not applicable Exploited In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CVE-2026-35178 Critical 2026-04-06 Not applicable No public exploit Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner. This vulnerability is fixed in 65.0.0.
CVE-2026-4538 Low 2026-03-22 Not applicable Proof of concept only A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through a pull request but has not reacted yet.
CVE-2026-25534 Critical 2026-03-17 No exploit published No public exploit ### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver. However, they missed that Java URL objects do not correctly handle underscores on parsing. This led to a bypass of the previous CVE (CVE-2025-61916) through the use of carefully crafted URLs. Note, Spinnaker found this not just in that CVE, but in the existing URL validations in Orca fromUrl expression handling. This CVE impacts BOTH artifacts as a result. ### Patches This has been merged and will be available in versions 2025.4.1, 2025.3.1, 2025.2.4 and 2026.0.0. ### Workarounds You can disable the various artifacts on this system to work around these limits.
CVE-2025-13219 High 2026-03-10 Not applicable No public exploit IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history.
CVE-2025-13213 Medium 2026-03-10 Not applicable No public exploit IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking
CVE-2026-26125 Critical 2026-03-05 Not applicable No public exploit Payment Orchestrator Service Elevation of Privilege Vulnerability
CVE-2025-66680 High 2026-03-03 Not applicable Proof of concept only An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request.
CVE-2026-3422 Critical 2026-03-02 Not applicable No public exploit U-Office Force developed by e-Excellence has a Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content.
CVE-2026-20127 Critical 2026-02-25 Not applicable Exploited A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric. 
CVE-2026-1344 Medium 2026-02-18 Not applicable No public exploit Tanium addressed an insecure file permissions vulnerability in Enforce Recovery Key Portal.
CVE-2026-25650 Medium 2026-02-06 Not applicable No public exploit MCP Salesforce Connector is a Model Context Protocol (MCP) server implementation for Salesforce integration. Prior to 0.1.10, arbitrary attribute access leads to disclosure of Salesforce auth token. This vulnerability is fixed in 0.1.10.
CVE-2026-24903 Medium 2026-02-06 Not applicable Proof of concept only OrcaStatLLM Researcher is an LLM Based Research Paper Generator. A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the Log Message in the Session Page in OrcaStatLLM-Researcher that allows attackers to inject and execute arbitrary JavaScript code in victims' browsers through malicious research topic inputs.
CVE-2025-15343 Medium 2026-02-05 Not applicable No public exploit Tanium addressed an incorrect default permissions vulnerability in Enforce.
CVE-2025-15328 Medium 2026-02-05 Not applicable No public exploit Tanium addressed an improper link resolution before file access vulnerability in Enforce.
CVE-2026-20732 Low 2026-02-04 Not applicable No public exploit A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-24747 High 2026-01-27 Not applicable No public exploit PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's `weights_only` unpickler allows an attacker to craft a malicious checkpoint file (`.pth`) that, when loaded with `torch.load(..., weights_only=True)`, can corrupt memory and potentially lead to arbitrary code execution. Version 2.10.0 fixes the issue.
CVE-2025-37185 Medium 2026-01-14 Not applicable No public exploit Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface and thereby make unauthorized arbitrary configuration changes to the host.
CVE-2025-37184 Critical 2026-01-14 Not applicable No public exploit A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby compromising the integrity of secured access to the system.
CVE-2025-37183 High 2026-01-14 Not applicable No public exploit Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
CVE-2025-37182 High 2026-01-14 Not applicable No public exploit Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
CVE-2025-37181 High 2026-01-14 Not applicable No public exploit Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.
CVE-2025-64699 High 2025-12-31 Not applicable No public exploit An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations, which could lead to system disruption (DoS) and exposure of sensitive data, and may facilitate local privilege escalation.
CVE-2025-61037 High 2025-12-31 Not applicable No public exploit A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files without verifying whether the path is an NTFS reparse point. By exploiting this race condition, an attacker can replace the target directory with a junction pointing to a user-controlled path. This causes the SYSTEM-level process to drop binaries in a location fully controlled by the attacker, allowing arbitrary code execution with SYSTEM privileges. The vulnerability can be exploited by any standard user with only a single UAC confirmation, making it highly practical and dangerous in real-world environments.
CVE-2025-60180 Critical 2025-12-18 Not applicable No public exploit Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.5.1.
CVE-2022-23851 Critical 2025-12-17 Not applicable Proof of concept only Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).
CVE-2025-65213 Critical 2025-12-15 Not applicable Proof of concept only MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code execution. An attacker can craft a malicious pickle file that executes arbitrary Python code when loaded, enabling remote code execution with the privileges of the victim process.
CVE-2025-13481 High 2025-12-11 Not applicable No public exploit IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
CVE-2025-13214 High 2025-12-11 Not applicable No public exploit IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVE-2025-13211 Medium 2025-12-11 Not applicable No public exploit IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
CVE-2025-13148 High 2025-12-11 Not applicable No public exploit IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.
CVE-2025-63396 Low 2025-11-12 Not applicable No public exploit An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS).
CVE-2025-12865 High 2025-11-10 Not applicable No public exploit U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
CVE-2025-12864 High 2025-11-10 Not applicable No public exploit U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents.
CVE-2025-64322 Medium 2025-11-04 Not applicable No public exploit Incorrect Permission Assignment for Critical Resource vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
CVE-2025-64321 Medium 2025-11-04 Not applicable No public exploit Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects Agentforce Vibes Extension: before 3.3.0.
CVE-2025-64320 Medium 2025-11-04 Not applicable No public exploit Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension: before 3.2.0.
CVE-2025-61990 High 2025-10-15 Not applicable No public exploit When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61958 High 2025-10-15 Not applicable No public exploit A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.  For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61951 High 2025-10-15 Not applicable No public exploit Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59781 High 2025-10-15 Not applicable No public exploit When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59483 High 2025-10-15 Not applicable No public exploit A validation vulnerability exists in an undisclosed URL in the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59481 High 2025-10-15 Not applicable No public exploit A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary system commands with higher privileges.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59269 High 2025-10-15 Not applicable No public exploit A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59268 Medium 2025-10-15 Not applicable No public exploit On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-58424 Medium 2025-10-15 Not applicable No public exploit On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-58153 High 2025-10-15 Not applicable No public exploit Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-58096 High 2025-10-15 Not applicable No public exploit When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-58071 High 2025-10-15 Not applicable No public exploit When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-55036 High 2025-10-15 Not applicable No public exploit When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is enabled, undisclosed traffic may cause memory corruption.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-54755 Medium 2025-10-15 Not applicable No public exploit A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-54479 High 2025-10-15 Not applicable No public exploit When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-53868 High 2025-10-15 Not applicable No public exploit When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-53856 High 2025-10-15 Not applicable No public exploit When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 .  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-53474 High 2025-10-15 Not applicable No public exploit When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-48008 High 2025-10-15 Not applicable No public exploit When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-47148 High 2025-10-15 Not applicable No public exploit When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-46706 High 2025-10-15 Not applicable No public exploit When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-41430 High 2025-10-15 Not applicable No public exploit When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-11198 High 2025-10-09 Not applicable No public exploit A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legitimate vSRX images with malicious ones. If a trusted user initiates deployment, Security Director Policy Enforcer will deliver the attacker's uploaded image to VMware NSX instead of a legitimate one. This issue affects Security Director Policy Enforcer:   * All versions before 23.1R1 Hotpatch v3. This issue does not affect Junos Space Security Director Insights.
CVE-2025-55560 High 2025-09-25 Not applicable No public exploit An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
CVE-2025-55558 High 2025-09-25 Not applicable Proof of concept only A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a Denial of Service (DoS).
CVE-2025-55557 High 2025-09-25 Not applicable Proof of concept only A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
CVE-2025-55554 Medium 2025-09-25 Not applicable No public exploit pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
CVE-2025-55553 High 2025-09-25 Not applicable Proof of concept only A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
CVE-2025-55552 High 2025-09-25 Not applicable Proof of concept only pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
CVE-2025-55551 High 2025-09-25 Not applicable Proof of concept only An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
CVE-2025-46153 Medium 2025-09-25 Not applicable No public exploit PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True.
CVE-2025-46152 Medium 2025-09-25 Not applicable No public exploit In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
CVE-2025-46150 Medium 2025-09-25 Not applicable No public exploit In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
CVE-2025-46149 Medium 2025-09-25 Not applicable No public exploit In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
CVE-2025-46148 Medium 2025-09-25 Not applicable No public exploit In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
CVE-2025-0165 Critical 2025-08-30 Not applicable No public exploit IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5.0.0 through 5.2.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVE-2025-54500 Medium 2025-08-13 Not applicable No public exploit An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-52585 High 2025-08-13 Not applicable No public exploit When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-54951 Critical 2025-08-07 Not applicable No public exploit A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff92829a466da97461cc7930c.
CVE-2025-54950 Critical 2025-08-07 Not applicable No public exploit An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit b6b7a16df5e7852d976d8c34c8a7e9a1b6f7d005.
CVE-2025-54949 Critical 2025-08-07 Not applicable No public exploit A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be
CVE-2025-30405 Critical 2025-08-07 Not applicable No public exploit An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73.
CVE-2025-30404 Critical 2025-08-07 Not applicable No public exploit An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006.
CVE-2025-30402 High 2025-07-11 Not applicable No public exploit A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 93b1a0c15f7eda49b2bc46b5b4c49557b4e9810f
CVE-2025-47436 Medium 2025-05-14 Not applicable No public exploit Heap-based Buffer Overflow vulnerability in Apache ORC. A vulnerability has been identified in the ORC C++ LZO decompression logic, where specially crafted malformed ORC files can cause the decompressor to allocate a 250-byte buffer but then attempts to copy 295 bytes into it. It causes memory corruption. This issue affects Apache ORC C++ library: through 1.8.8, from 1.9.0 through 1.9.5, from 2.0.0 through 2.0.4, from 2.1.0 through 2.1.1. Users are recommended to upgrade to version 1.8.9, 1.9.6, 2.0.5, and 2.1.2, which fix the issue.
CVE-2025-41433 High 2025-05-07 Not applicable No public exploit When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-41431 High 2025-05-07 Not applicable No public exploit When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-41414 High 2025-05-07 Not applicable No public exploit When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2025-41399 High 2025-05-07 Not applicable No public exploit When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-36557 High 2025-05-07 Not applicable No public exploit When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-36504 High 2025-05-07 Not applicable No public exploit When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-35995 High 2025-05-07 Not applicable No public exploit When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-31644 High 2025-05-07 Not applicable Proof of concept only When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-46547 Medium 2025-04-25 Not applicable No public exploit In Sherpa Orchestrator 141851, the web application lacks protection against CSRF attacks, with resultant effects of an attacker conducting XSS attacks, adding a new user or role, or exploiting a SQL injection issue.
CVE-2025-46546 High 2025-04-25 Not applicable No public exploit In Sherpa Orchestrator 141851, multiple time-based blind SQL injections can be performed by an authenticated user. This affects api/gui/asset/list, /api/gui/files/export/csv/, /api/gui/files/list, /api/gui/process/export/csv, /api/gui/process/export/xlsx, /api/gui/process/listAll, /api/gui/processVersion/export/csv/, /api/gui/processVersion/export/xlsx/, /api/gui/processVersion/list/, /api/gui/robot/list/, /api/gui/task/export/csv/, /api/gui/task/export/xlsx/, and /api/gui/task/list/.
CVE-2025-46545 Medium 2025-04-25 Not applicable No public exploit In Sherpa Orchestrator 141851, the functionality for adding or updating licenses allows for stored XSS attacks by an administrator through the name parameter. The XSS payload can execute when the license expires.
CVE-2025-46544 Medium 2025-04-25 Not applicable No public exploit In Sherpa Orchestrator 141851, a low-privileged user can elevate their privileges by creating new users and roles.
CVE-2025-32434 Critical 2025-04-18 Not applicable No public exploit PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.
CVE-2025-3730 Medium 2025-04-16 Not applicable Proof of concept only A vulnerability, which was classified as problematic, was found in PyTorch 2.6.0. Affected is the function torch.nn.functional.ctc_loss of the file aten/src/ATen/native/LossCTC.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 46fc5d8e360127361211cb237d5f9eef0223e567. It is recommended to apply a patch to fix this issue. The security policy of the project warns to use unknown models which might establish malicious effects.
‹ prev page 2 of 14 next ›