2025

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an au

Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing

GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi

Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi

A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secur

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals cou

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) guest portals cou

A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Emai

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco

A vulnerability in a policy-based Cisco Application Visibility and Control (AVC) implementation of Cisco AsyncOS Softwar

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a

A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo

A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker with valid read-only credentials to

A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands as th

HCL iAutomate is affected by a session fixation vulnerability.  An attacker could hijack a victim's session ID from thei

This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability i

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does n

Dell Avamar, version 19.4 or later, contains an access token reuse vulnerability in the AUI. A low privileged local atta

ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacke

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16

An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 pr

An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and

IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having co

When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used fo

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior

An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10

A denial of service vulnerability was identified in GitLab CE/EE, affecting all versions from 15.11 prior to 16.6.7, 16.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't fail inserts if duplica

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't skip expired elements d

The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable t

NETGEAR XR1000 before 1.0.0.74, XR1000v2 before 1.1.0.22, and XR500 before 2.3.2.134 allow remote code execution by unau

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL