CVE-2025-4440 H3C GR-1800AX aspForm EnableIpv6 buffer overflow

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. Access to the local network is required for this attack to succeed...

CVE-2025-4440

CVE-2025-4440 affects H3C GR-1800AX (up to 100R008). The vulnerability is in the EnableIpv6 function of the file /goform/aspForm, where manipulating the param argument leads to a buffer overflow. Access to the local network is required for exploitation, and the exploit has been disclosed publicly...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22477

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...

K000151206: Oracle Java SE vulnerability CVE-2025-21587

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

PT-2025-20018 · Libplctag · Libplctag

Name of the Vulnerable Software and Affected Versions: libplctag versions 2.0 through 2.6.3 Description: The issue is related to an Out-of-bounds Read in the unpack response function, located in session.c, which allows Overread Buffers via the network. This can be exploited to potentially access...

PT-2025-20019 · Libplctag · Libplctag

Name of the Vulnerable Software and Affected Versions: libplctag versions 2.0 through 2.6.3 Description: The issue is related to an Out-of-bounds Read in the unpack response function, located in conn.c, which allows Overread Buffers via the network. This can be exploited to potentially access...

Oracle Access Manager (April 2025 CPU)

The 12.2.1.4.0 versions of Access Manager installed on the remote host are affected by a vulnerability as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Proxy Apache Mina. The supported version that is affecte...

SMB to HTTP relay version of Get NAA Creds

This module creates an SMB server and then relays the credentials passed to it to SCCM's HTTP server aka Management Point to gain an authenticated connection. Once authenticated it then attempts to retrieve the Network Access Accounts, if configured, from the SCCM server. This requires a computer...

CVE-2025-23379

Dell Storage Center - Dell Storage Manager, versions 21.0.20, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Script...

CVE-2025-22477

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-22478

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Restriction of XML External Entity Reference vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure and Information...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

CVE-2025-22476

Dell Storage Center (Dell Storage Manager) 20.1.20 is affected by a Command Injection vulnerability (Improper Neutralization of Special Elements in commands). A low-privileged attacker with adjacent network access could potentially achieve remote code execution. The PT-2025-19884 document confirm...

MariaDB 10.11.0 < 10.11.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.11.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.11.12 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected a...

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from buffer overflow in the stack. This allows a malicious user to trigger a service failure.

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

CVE-2025-25504

Gefen WebFWC (In AV over IP) versions 1.70, 1.85h, and 1.86v contain an unauthenticated remote command execution flaw in /usr/local/bin/jncs.sh. Attackers with network access can reach TCP port 4444 and execute commands with root privileges. The vulnerability is documented across multiple sources...

Gefen WebFWC 安全漏洞

Gefen WebFWC is a web-based remote control solution from Gefen for centralized management of professional AV equipment such as Gefen matrix switchers and extenders. A security vulnerability exists in Gefen WebFWC versions v1.85h, v1.86v, and v1.70 that originates from unauthenticated network acce...