2025

An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated

An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated u

An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated us

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentia

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained

An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays ope

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected devices exposes server info

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application exhibits incons

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device contains a USB port

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected device stores sensitive inf

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected application do not properly

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.1), RUGGEDCOM RS416Pv2 V5.X (All ver

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application lacks i

A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0). The affected application does no

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications do

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4). Affected applications con

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerabl

A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1). The affected application is vulnerabl

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi

A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V2

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when

In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twi

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: use lock accessing port_state and rport st

In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xe_gem_fault when running core_

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer bet

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload e

In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: fix hmm_pfn_to_map_order() usage Handl

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will he

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq buffer virtual address a

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix infinite loop in __insert_extent_tree()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mma

In the Linux kernel, the following vulnerability has been resolved: sctp: Prevent TOCTOU out-of-bounds write For the f

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Shutdown FW DMA in bnxt_shutdown() The ne

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jo

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_close_cached

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usag

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successf

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server

Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these b

Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption a

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 11

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunde

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunde