The vulnerability of the Apache Nuttx operating system, related to the operation of operations beyond buffer boundaries in memory, allows a attacker to trigger a service failure.

The vulnerability of the Apache Nuttx operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Device Admin App operating system ctrlX OS allows attackers to carry out “man-in-the-middle” type attacks.

The vulnerability of the Device Admin App on the ctrlX OS platform is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to carry out “man-in-the-middle” attacks by sending specially crafted HTTP requests...

The vulnerability of the Device Admin App operating system ctrlX OS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Device Admin App on the ctrlX OS platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP requests...

The vulnerability of the Device Admin App on the ctrlX OS operating system allows a perpetrator to compromise the integrity of the vulnerable application’s configuration.

The vulnerability of the Device Admin App on the ctrlX OS lies in the improper validation of the data entered by the user against a list of allowed values. Exploiting this vulnerability allows an attacker to compromise the integrity of the vulnerable application by sending a specially crafted HTT...

The vulnerability of the CLI component of the Brocade Fabric OS operating system allows a hacker to trigger a service failure.

The vulnerability of the CLI component of the Brocade Fabric OS operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the LAN Controller feature of the Cisco IOS XE operating system allows a hacker to execute arbitrary commands.

The vulnerability of the LAN Controller feature of the Cisco IOS XE operating system is related to the failure to take measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-49537

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by a high-privileged attacker. Exploitation of this issue requires user...

NTFS Elevation of Privilege Vulnerability

Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2025-42968

SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on...

CVE-2025-42963 Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer )

A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...

CVE-2025-42963

The CVE-2025-42963 entry describes a critical issue in SAP NetWeaver Application Server for Java Log Viewer: authenticated administrators can exploit unsafe Java object deserialization to achieve full OS compromise, affecting confidentiality, integrity, and availability. The vulnerability is clas...

Microsoft Virtual Hard Disk 安全漏洞

Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft USA. A security vulnerability exists in Microsoft Virtual Hard Disk VHDX. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1607 for...

Microsoft MPEG-2 Video Extension 资源管理错误漏洞

Microsoft MPEG-2 Video Extension is a Microsoft Corporation USA playback of MPEG video in popular video applications on Windows 10 devices. A resource management error vulnerability exists in Microsoft MPEG-2 Video Extension. An attacker exploiting this vulnerability could remotely execute code...

Microsoft Windows UPnP 资源管理错误漏洞

Microsoft Windows UPnP is a device agent from Microsoft Corporation USA. A proxy is provided to allow Windows network connections to recognize the IP address of the ZoneDirector. A resource management error vulnerability exists in Microsoft Windows UPnP. An attacker could exploit the vulnerabilit...

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 安全漏洞

IBM InfoSphere Data Replication VSAM for z/OS Remote Source is a source data replication engine from International Business Machines IBM. A security vulnerability exists in IBM InfoSphere Data Replication VSAM for z/OS Remote Source version 11.4 that originates from a remote user that could cause...

Adobe ColdFusion 操作系统命令注入漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion operating system command injection vulnerability, the vulnerability stems from the...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock. An attacker could exploit the vulnerability to elevate privileges. The...

Gitk 操作系统命令注入漏洞

Gitk is an open source graphical tool that comes with Git to view information such as commit history and branch structure of Git repositories. Gitk suffers from an operating system command injection vulnerability that stems from the ability to create and truncate any writable file when a user...

Microsoft Windows BitLocker 安全漏洞

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker could bypass certain features by exploiting the vulnerability. The following...

SAP NetWeaver Application Server for Java 代码问题漏洞

SAP NetWeaver Application Server for Java is a Java EE-based application server from SAP, Germany. A code issue vulnerability exists in SAP NetWeaver Application Server for Java, which stems from insecure Java object deserialization and could lead to a complete crack of the operating system...