Lucene search
+L

19064 matches found

RedhatCVE
RedhatCVE
•added 2025/12/08 6:11 p.m.•19 views

CVE-2025-13292

A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics AX data and access logs belonging to other Apigee customer organizations. Apigee-X was found to be vulnerable. This vulnerability was patched in version 1-16-0-apigee-3. No user action i...

7.6CVSS6.8AI score0.00275EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/08 5:16 p.m.•20 views

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

7.2CVSS5.9AI score0.06686EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/08 5:16 p.m.•30 views

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

7.2CVSS0.06686EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/08 4:57 p.m.•49 views

CVE-2025-48607

Technical details about CVE-2025-48607 are not publicly available in the provided documents. Sources reiterate a local DoS due to a logic error but do not specify affected products/versions or remediation. Monitor for updates.

5.5CVSS6AI score0.00082EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/12/08 4:57 p.m.•50 views

CVE-2025-48600

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00175EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/12/08 9:05 a.m.•8 views

net: sched: act_connmark: initialize struct tc_ife to fix kernel leak

...

5.5CVSS6.6AI score0.00197EPSS
SaveExploits0
EUVD
EUVD
•added 2025/12/08 3:31 a.m.•13 views

EUVD-2025-201624

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

5.7AI score0.00201EPSS
SaveExploits0References9
osv_debian
osv_debian
•added 2025/12/08 1:16 a.m.•15 views

DEBIAN-CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

5.9AI score0.00201EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/08 1:16 a.m.•19 views

CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

0.00201EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2025/12/08 1:16 a.m.•22 views

UBUNTU-CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

5.9AI score0.00201EPSS
SaveExploits0References36
osv_cve
osv_cve
•added 2025/12/08 12:46 a.m.•26 views

CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

6.3AI score
SaveExploits0References11
Debian CVE
Debian CVE
•added 2025/12/08 12:46 a.m.•23 views

CVE-2025-40321

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

5.9AI score0.00201EPSS
SaveExploits0
CVE
CVE
•added 2025/12/08 12:46 a.m.•61 views

CVE-2025-40321

CVE-2025-40321 affects the Linux kernel brcmfmac WLAN driver. The crash happens when transmitting an ANQP/Action Frame in standalone AP mode because the driver uses an uninitialized P2P vif pointer. The fix described in the advisory is to always use the vif corresponding to the wdev that initiate...

5.7AI score0.00201EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/12/08 12:46 a.m.•53 views

CVE-2025-40321 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

0.00201EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/12/08 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2025-40321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver...

6.1AI score0.00201EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/12/08 12:00 a.m.•29 views

EUVD-2025-201720

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

7.2CVSS6.7AI score0.06686EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/12/08 12:00 a.m.•12 views

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs APRGOS 11.1.x allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the webaction.do endpoint...

6.2AI score0.06686EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/08 12:00 a.m.•43 views

CVE-2025-65363

Ruijie APs running AP_RGOS version 11.1.x are vulnerable to an authenticated append-style command-injection vulnerability. The issue exists within the web_action.do endpoint, where an authenticated web user can execute appended shell expressions as root via the command parameter. Successful explo...

7.2CVSS6.2AI score0.06686EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•18 views

PT-2025-49570

Name of the Vulnerable Software and Affected Versions Ruijie APs versions 11.1.x Description An authenticated user with web access can inject shell commands on Ruijie APs. This allows execution of appended shell expressions as root through the command parameter in the ''web action.do'' endpoint...

7.2CVSS6.6AI score0.06686EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/08 12:00 a.m.•2 views

CVE-2025-40321: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a need to transmit an Action frame, the brcmfmac driver always uses the P2P vif to send the "actframe" IOVAR to firmware. Th...

5.7AI score0.00201EPSS
SaveExploits0References1
Rows per page
Query Builder