CVE CyberSecurity Database News

Jan 9, 2025 Microsoft Exploit

CVE-2025-21385: Server-Side Request Forgery (SSRF) Vulnerability Discovered in Microsoft Purview - Exploit Details and Mitigation Steps

Microsoft Purview, an essential and widely-used data governance service for managing and securing enterprise information, has been identified to have an SSRF (Server-Side Request Forgery)

Jan 9, 2025 Exploit

CVE-2024-55225 - Vaultwarden User Impersonation Vulnerability: How Attackers Can Exploit the src/api/identity.rs Component

A critical vulnerability, identified as CVE-2024-55225, has been recently discovered in Vaultwarden, an open-source password manager. The issue impacts the component src/api/identity.rs,

Jan 9, 2025

CVE-2024-13041: Critical External Groups Configuration Issue in GitLab CE/EE Allows Unauthorized Access to Internal Projects and Groups

A security vulnerability has been discovered in GitLab CE/EE, affecting all versions starting from 16.4 to 17.5.5, starting from 17.6

Jan 9, 2025 Exploit

CVE-2024-6324 - GitLab CE/EE DoS via Cyclic References Between Epics

An issue has been discovered in GitLab CE/EE, impacting all versions starting from 15.7 prior to 17.5.5, starting from 17.6

Jan 9, 2025 Exploit

CVE-2024-27980 - How Improper Handling of Batch Files Leads to Code Execution Vulnerability in Child_Process

As developers, we must always be vigilant about security vulnerabilities. One such vulnerability has been identified as CVE-2024-27980. This issue stems from the improper handling