CVE CyberSecurity Database News (Page 300)

Jan 30, 2025 Windows Mac

CVE-2025-23007 - Exploiting NetExtender Windows Client Log Export to Access System Files & Escalate Privileges

--- Introduction In early 2025, a critical security vulnerability—CVE-2025-23007—was discovered in SonicWall's popular NetExtender Windows client. The bug affects the log

Jan 29, 2025 Microsoft API Exploit JSON Web Token

CVE-2025-21415 - Authentication Bypass by Spoofing in Azure AI Face Service – How Attackers Can Elevate Privileges Over Network

A newly disclosed vulnerability, CVE-2025-21415, has shaken up cloud security conversations. This flaw impacts Azure AI Face Service – a critical component for many organizations using

Jan 29, 2025 Windows Microsoft API Exploit

CVE-2025-21396 - Missing Authorization in Microsoft Account Lets Hackers Elevate Privileges Over the Network

--- Introduction In 2025, a critical vulnerability—CVE-2025-21396—was discovered in Microsoft Account’s authorization flow. This flaw lets attackers with network access escalate their

Jan 29, 2025 Exploit Java

CVE-2025-0851 - Path Traversal Vulnerability in Deep Java Library’s ZipUtils.unzip and TarUtils.untar

A new security issue—CVE-2025-0851—has been discovered in Deep Java Library (DJL), a popular framework for deep learning in Java. This vulnerability can let

Jan 29, 2025 Exploit

CVE-2024-12705 - DNS-over-HTTPS Flooding Vulnerability in BIND 9 - Simple Explanation, Proof-of-Concept, and Impact

_CVE-2024-12705_ is a critical vulnerability impacting the popular DNS server software, BIND 9, specifically related to its DNS-over-HTTPS (DoH) functionality. This flaw enables so-called “application-layer”