2025

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate

When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can c

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication

When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to termin

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase i

When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the url

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS

A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This

An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system

BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution

gnuplot is affected by a heap buffer overflow at function utf8_copy_one.

Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.

Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers c

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege e

Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager.  The vulnerability could allow authentica

Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum cli

Cross Site Scripting vulnerability in Koillection v.1.6.10 allows a remote attacker to escalate privileges via the colle

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code executio

Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ direct

dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is

WeGIA is a web manager for charitable institutions. An unauthenticated SQL Injection vulnerability was identified in ve

The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80, an attacke

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversa

A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to re

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an una

A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authen

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated

A vulnerability in the management API of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticate

A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could a

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote at

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privile

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privile

A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an au

A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX

A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authen

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Ser

A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client de

A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could

A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software co