16548 matches found
EUVD-2025-197976
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
CVE-2025-6670
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
CVE-2025-6670
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
CVE-2025-6670 Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
CVE-2025-6670
Summary: CVE-2025-6670 describes a CSRF vulnerability in multiple WSO2 products due to using HTTP GET for state-changing admin service operations in the Carbon console event processor. Despite SameSite=Lax mitigation, the cookie attribute is ineffective for cross-origin top-level navigations, all...
CVE-2025-6670 Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
CVE-2025-6670: Cross-Site Request Forgery (CSRF)
A Cross-Site Request Forgery CSRF vulnerability exists in multiple WSO2 products due to the use of the HTTP GET method for state-changing operations within admin services, specifically in the event processor of the Carbon console. Although the SameSite=Lax cookie attribute is used as a mitigation...
Siemens RUGGEDCOM ROS Improper Control of Generation of Code (CVE-2022-34663)
Affected devices are vulnerable to a web-based code injection attack via the console. An attacker could exploit this vulnerability to inject code into the web server and cause malicious behavior in legitimate users accessing certain web resources on the affected device. This plugin only works wit...
VulnCheck KEV: CVE-2025-58034
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands...
liteuart_probe Heap Buffer Overflow DoS
The vulnerability of the liteuartprobe function in the drivers/tty/serial/liteuart.c file of the console TTY driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-8870
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
EUVD-2025-197616
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870
CVE-2025-8870 affects Arista EOS. The vulnerability arises from how serial console input is handled, potentially causing an unexpected device reload. Affected EOS releases include 4.34.2FX for certain 710X-series platforms; not all EOS platforms are affected. The Red Hat and NVD entries corrobora...
CVE-2025-8870 On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
PT-2025-46974
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description Certain serial console input on affected platforms running Arista EOS may cause an unexpected reload of the device. Recommendations At the moment, there is no information about a newer...
CVE-2025-8870: Uncaught Exception
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
Arista EOS security vulnerabilities
Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista USA. A security vulnerability exists in Arista EOS that stems from improper handling of serial console inputs, which could result in an unexpected reboot of the device...
CVE-2025-13130
A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of the component Service. Such manipulation leads to incorrect default permissions. The attack can only be performed from a local environment...
CVE-2025-13131 Sonarr Service Sonarr.Console.exe default permission
A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the component Service. Performing manipulation results in incorrect default permissions. The attack is only possible with local access. The vend...