2025

TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g paramet

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-ma

Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote u

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to v

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Bu

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmet_enable_por

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeu

In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building

In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_b

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_g

In the Linux kernel, the following vulnerability has been resolved: mcb: fix a double free bug in chameleon_parse_gdd()

In the Linux kernel, the following vulnerability has been resolved: tty: Require CAP_SYS_ADMIN for all usages of TIOCL_

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix invalid pointer dereference in Etron

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not

In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmab

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !

In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Ad

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference

The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary fil

The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execut

Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses qu

On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may b

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is conf

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Micro

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate

When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can c

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to termin

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase i

When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the url

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code executio

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversa

A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticate

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause

A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an au

A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Ser

A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software co

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authent

A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote at

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE