National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 45,305 matching advisories
Page 35 of 1,888
CWE-476 Remote (AV:N)

A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a specially crafted EXT4 filesystem...

📅 2026-06-01 Inspect Dossier →
CVE-2025-60495 MEDIUM 5.5
CWE-476

A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a c...

📅 2026-06-01 Inspect Dossier →
CVE-2025-60486 MEDIUM 5.5
CWE-416

A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file....

📅 2026-06-01 Inspect Dossier →
CVE-2025-60485 MEDIUM 5.5
CWE-476

A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a cra...

📅 2026-06-01 Inspect Dossier →
CVE-2025-60483 MEDIUM 5.5
CWE-476

A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) v...

📅 2026-06-01 Inspect Dossier →
CVE-2025-60481 MEDIUM 5.5
CWE-476

A NULL pointer dereference in the gf_odf_ac4_cfg_dsi_v1 function (/odf/descriptors.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ...

📅 2026-06-01 Inspect Dossier →
CVE-2025-55664 MEDIUM 5.5
CWE-122

A heap buffer overflow in the m2tsdmx_send_packet function (filters/dmx_m2ts.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file....

📅 2026-06-01 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-78

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that all...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-23

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in version 7.9.1.0 R2502171040 that allows attackers with access to the TX Host to execute code...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 RX Host in version ...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-125

Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0 R2601141040 that allows attackers with access to the TX Host to execute code on the RX Hos...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41277 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41276 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41275 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41274 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41273 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-288 Remote (AV:N)

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows ...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41272 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-23 Remote (AV:N)

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated attackers t...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41270 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41269 CRITICAL 9.8
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version...

📅 2026-05-29 Inspect Dossier →
CVE-2025-41268 CRITICAL 9.1
waterfall-security/wf-500_firmware CWE-23 Remote (AV:N)

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote unauthenticated atta...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version ...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version ...

📅 2026-05-29 Inspect Dossier →
waterfall-security/wf-500_firmware CWE-78 Remote (AV:N)

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Waterfall WF-500 TX Host in version ...

📅 2026-05-29 Inspect Dossier →
Showing Page 35 of 1,888 • 45,305 matching CVEs (out of 391,734 NIST advisories)