General-Purpose System Vulnerabilities
Vulnerabilities related to traditional IT systems, servers, and desktop applications.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-21227 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthoriz… | High (8.2) | 2026-01-22 | General Purpose |
| CVE-2025-67652 | An attacker with access to the project file could use the exposed credentials to impersonate users, escalate privilege… | Medium (6.1) | 2026-01-22 | General Purpose |
| CVE-2025-54816 | This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauth… | Critical (9.4) | 2026-01-22 | General Purpose |
| CVE-2025-53968 | This vulnerability arises because there are no limitations on the number of authentication attempts a user can make. A… | High (7.5) | 2026-01-22 | General Purpose |
| CVE-2025-25051 | An attacker could decrypt sensitive data, impersonate legitimate users or devices, and potentially gain access to netw… | Medium (6.1) | 2026-01-22 | General Purpose |