Cisco IOS XE Software Bootstrap Arbitrary File Write (cisco-sa-bootstrap-KfgxYgdh)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient...

PT-2025-20269 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying...

Cisco IOS XE Software Privilege Escalation (cisco-sa-iosxe-privesc-su7scvdp)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an...

Cisco IOS Software for Catalyst 2960X 2960XR 2960CX 3560CX Series Switches Secure Boot Bypass (cisco-sa-c2960-3560-sboot-ZtqADrHq)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with...

PT-2025-20270 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying...

USN-7488-1: Python vulnerabilities

It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery SSRF attack. This issue only affected python 2.7 and python3.4 on Ubuntu 14.04 LTS; python2.7 on Ubuntu 16.04 LTS; python2.7,...

CVE-2025-27132

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...

CVE-2025-25218

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-22886

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-25052 arkcompiler_ets_runtime has a buffer overflow vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow...

CVE-2025-25052 arkcompiler_ets_runtime has a buffer overflow vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through buffer overflow...

CVE-2025-27241 multimedia_av_codec has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-27241

OpenHarmony vulnerability CVE-2025-27241 affects v5.0.3 and earlier, where a NULL pointer dereference can be exploited by a local attacker to cause a denial of service (DOS). The issue is documented across multiple feeds (e.g., Red Hat and CVE lists) with a local attack vector and low attack comp...

CVE-2025-27248 ai_neural_network_runtime has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-27248

OpenHarmony vulnerability CVE-2025-27248 affects OpenHarmony v5.0.3 and earlier. The issue is a local denial-of-service caused by a NULL pointer dereference in the affected code path. Root cause: NULL pointer dereference leading to crash/unresponsiveness. Impact: LOCAL attacker can trigger DoS. T...

CVE-2025-22886 distributeddatamgr_udmf has a memory leak vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-22886 distributeddatamgr_udmf has a memory leak vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory...

CVE-2025-22886

OpenHarmony vulnerability CVE-2025-22886 affects OpenHarmony v5.0.3 and earlier. The issue stems from missing release of memory in a component, enabling a local attacker to cause a Denial of Service. Affected scope is limited to local access; integrity and confidentiality are not impacted per ava...

CVE-2025-27132

In OpenHarmony, CVE-2025-27132 describes an out-of-bounds write vulnerability that allows a local attacker to execute arbitrary code in pre-installed apps on OpenHarmony v5.0.3 and earlier. The issue stems from a faulty write operation in the affected component (as noted across multiple sources),...

CVE-2025-27132 arkcompiler_ets_runtime has an out-of-bounds write vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios...