CVE-2025-43024High· 7.5▾ TwilightA GUI dialog of an application allows to view what files are in the file system without proper authorization.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A GUI dialog of an application allows to view what files are in the file system without proper authorization.
thinpro = 8.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-43017Critical· 9.8HP ThinPro 8.1 System management application failed to verify user's true id
CVE-2016-5388High· 8.1Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment…
CVE-2025-11531High· 8.8HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths
CVE-2025-10578High· 7.8A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0
CVE-2022-23934High· 8.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23933High· 8.2Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.