Vulnerability Intelligence
Reviewed CVE records, security advisories and in-depth analysis — every entry linked to its official source.
Progress Moveit Transfer < 2025.1.6
Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Progress Moveit Transfer < 2025.1.6
Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
Ivanti Connect Secure >= 25.1.0.0, < 25.1.1.2
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
Microsoft Outlook Web
Microsoft Windows Command Injection Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
Microsoft Windows 10 1607 < 10.0.14393.9612
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
Microsoft Windows 10 1607 < 10.0.14393.9612
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
Microsoft Windows 10 1607 < 10.0.14393.9612
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
Microsoft Windows 10 1607 < 10.0.14393.9612
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
Ibm Websphere Application Server >= 20.0.0.12, < 26.0.0.11
IBM WebSphere Application Server – Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
Ibm Planning Analytics 2.0
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.