CWE-475

Undefined Behavior for Input to API

3 CVEs Avg CVSS 6.4 MITRE
0
CRITICAL
2
HIGH
1
MEDIUM
0
LOW
1
POC
0
KEV

Monthly

CVE-2025-47866 MEDIUM This Month

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

File Upload Apex Central
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2025-47865 HIGH This Week

Local File Inclusion (LFI) vulnerability in Trend Micro Apex Central widgets that enables remote code execution (RCE) on affected systems. This vulnerability affects Trend Micro Apex Central installations below version 8.0.6955 and requires an authenticated attacker with low privileges to exploit. The vulnerability combines LFI with RCE capabilities, representing a significant threat to organizations using vulnerable Apex Central deployments.

RCE Trendmicro Lfi Apex Central
NVD
CVSS 3.1
7.5
EPSS
0.7%
CVE-2024-10569 HIGH POC This Week

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Gradio
NVD
CVSS 3.0
7.5
EPSS
0.2%
CVE-2025-47866
EPSS 0% CVSS 4.3
MEDIUM This Month

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.

File Upload Apex Central
NVD
CVE-2025-47865
EPSS 1% CVSS 7.5
HIGH This Week

Local File Inclusion (LFI) vulnerability in Trend Micro Apex Central widgets that enables remote code execution (RCE) on affected systems. This vulnerability affects Trend Micro Apex Central installations below version 8.0.6955 and requires an authenticated attacker with low privileges to exploit. The vulnerability combines LFI with RCE capabilities, representing a significant threat to organizations using vulnerable Apex Central deployments.

RCE Trendmicro Lfi +1
NVD
CVE-2024-10569
EPSS 0% CVSS 7.5
HIGH POC This Week

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Gradio
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy