11513 matches found
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of reques...
CVE-2025-20280: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against users of the interface of an affected system. This...
CVE-2025-20270: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability is due to improper validation of reques...
Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 跨站脚本漏洞
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure are both products of Cisco Corporation.Cisco Evolved Programmable Network Manager is a network management Cisco Prime Infrastructure is a software application that simplifies the management of wireless and wired networks...
Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 信息泄露漏洞
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure are both products of Cisco Corporation.Cisco Evolved Programmable Network Manager is a network management Cisco Prime Infrastructure is a software application used to simplify the management of wireless and wired networks...
PT-2025-35806
Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager EPNM and Cisco Prime Infrastructure affected versions not specified Description A vulnerability exists in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM and Cisc...
MAL-2025-42136 Malicious code in newrelic-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in newrelic-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices
Cybersecurity researchers have flagged a Ukrainian IP network for engaging in massive brute-force and password spraying campaigns targeting SSL VPN and RDP devices between June and July 2025. The activity originated from a Ukraine-based autonomous system FDN3 AS211736, per French cybersecurity...
Integrated Simulation Framework for Adversarial Attacks on Autonomous Vehicles
Autonomous vehicles AVs rely on complex perception and communication systems, making them vulnerable to adversarial attacks that can compromise safety. While simulation offers a scalable and safe environment for robustness testing, existing frameworks typically lack comprehensive supportfor...
Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication
Amazon on Friday said it flagged and disrupted what it described as an opportunistic watering hole campaign orchestrated by the Russia-linked APT29 actors as part of their intelligence gathering efforts. The campaign used "compromised websites to redirect visitors to malicious infrastructure...
DELL ThinOS 10 Unauthorized Access Vulnerability
DELL ThinOS 10 is a next-generation thin client operating system from Dell designed for virtual desktop infrastructure VDI to improve security, efficiency and user experience. DELL ThinOS 10 suffers from an unauthorized access vulnerability that stems from unvalidated ownership, which can be...
DELL ThinOS 10 Protection Mechanism Failure Vulnerability
DELL ThinOS 10 is a next-generation thin client operating system from Dell designed for virtual desktop infrastructure VDI to improve security, efficiency and user experience. DELL ThinOS 10 suffers from a Protection Mechanism Failure vulnerability, which stems from a failure of the protection...
The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure in the Hitachi Ops Center Common Services lies in its use of default account information, which allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of Hitachi Ops Center Common Services is related to the use of default account information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protecte...
Ubuntu 25.04 : Linux kernel (Azure) vulnerabilities (USN-7721-1)
"The remote Ubuntu 25.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7721-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in th...
USN-7704-5 linux-gke, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...
USN-7704-5: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-AFFA; - Multiple devices driver; - Media drivers; - Network...
USN-7703-4: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - GPIO subsystem; - GPU...
