CVE-2025-22894

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...

CVE-2025-22894

Unprotected Windows messaging channel 'Shatter' issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a...

CVE-2025-22894

CVE-2025-22894 involves an unprotected Windows messaging channel, named ‘Shatter’, in Defense Platform Home Edition (DPHE) v3.9.51.x and earlier. The issue allows a local attacker who can send a crafted message to a specific Windows process to alter system files and cause the execution of an arbi...

CVE-2025-22890

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...

CVE-2025-22890

Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained...

CVE-2025-22890

Defense Platform Home Edition (Humming Heads)

Trimble Cityworks (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated user to perform a remote code execution. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides...

PT-2025-5803

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue exists due to an unprotected Windows messaging channel, also known as 'Shatter'. If an attacker sends a specially crafted message to the specific process of th...

PT-2025-5804

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue is related to an unprotected Windows messaging channel, also known as 'Shatter'. This allows an attacker to send a specially crafted message to a specific...

Humming Heads Defense Platform 安全漏洞

Humming Heads Defense Platform is a network security software from Humming Heads, Inc. A security vulnerability exists in Humming Heads Defense Platform Ver.3.9.51.x and earlier versions, which stems from the presence of a buffer overflow that could allow an attacker to gain SYSTEM privileges on ...

PT-2025-5802

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue allows an attacker to obtain SYSTEM privilege of the Windows system where the product is running by performing a specific operation. This is due to an executio...

PT-2025-5806 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: A NULL pointer dereference issue exists, allowing an attacker to cause a denial-of-service DoS condition by providing specially crafted data to a specific process of the...

Humming Heads Defense Platform 参数注入漏洞

Humming Heads Defense Platform is a network security software from Humming Heads, Inc. A parameter injection vulnerability exists in Humming Heads Defense Platform Ver.3.9.51.x and prior versions, which stems from improper parameter delimiter neutralization, and could cause a blue screen of death...

Humming Heads Defense Platform 代码问题漏洞

Humming Heads Defense Platform is a network security software from Humming Heads, Inc. A code issue vulnerability exists in Humming Heads Defense Platform Ver.3.9.51.x and prior versions, which stems from a null pointer reference issue, where the system may trigger a blue screen of death BSOD,...

PT-2025-5807 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Defense Platform Home Edition versions 3.9.51.x and earlier Description: The issue is related to improper neutralization of argument delimiters in a command, also known as 'Argument Injection'. This can cause a denial-of-service DoS condition...

PT-2025-5805

Name of the Vulnerable Software and Affected Versions Defense Platform Home Edition versions 3.9.51.x and earlier Description A buffer overflow issue exists, allowing a remote attacker to potentially gain SYSTEM privileges of the Windows system where the product is installed, by performing a...

CVE-2022-20924

A vulnerability in the Simple Network Management Protocol SNMP feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerabili...

CVE-2022-20946

A vulnerability in the generic routing encapsulation GRE tunnel decapsulation feature of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory handling err...

CVE-2022-20927

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

CVE-2022-20947

A vulnerability in dynamic access policies DAP functionality of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This...