28161 matches found
CVE-2024-12010
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...
NTFS File System Disclosure
The vulnerability of the NTFS file system in Windows operating systems is related to the disclosure of password values in the log files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these files...
DirectX System Failure
The vulnerability of the DirectX component in Windows operating systems is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cisco IOS XR Filtering Outgoing Packets
The vulnerability of the IPv4 and IPv6 outgoing packet filtering function in the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...
PT-2025-11187
Name of the Vulnerable Software and Affected Versions: Fortinet FortiDDoS-F versions 7.0.0 through 7.02 Fortinet FortiDDoS-F versions prior to 6.6.3 Description: The software contains an improper neutralization of special elements used in an OS command, which may allow a privileged attacker to...
NTLM Hash Spoofing
The vulnerability of the NTLM Hash component of the Windows operating system is related to incorrect external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
CVE-2025-20138
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...
Cisco IOS XR security vulnerabilities
Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR that stems from incomplete file validation during boot validation, which could allow a local attacker to bypass image signature verification...
Palo Alto Networks PAN-OS security vulnerabilities
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which originates in the GlobalProtect feature, where an unauthenticated attacker sending a large number of specially...
Cisco IOS XR Access Control Vulnerability
Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An access control error vulnerability exists in Cisco IOS XR that stems from incorrect handling of IPv4 packets and could lead to bypassing configured access control lists...
Cisco IOS XR security vulnerabilities
Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR version 7.9.2 that stems from incorrect handling of specific packets and could cause control plane traffic to stop working...
VulnCheck KEV: CVE-2025-21590
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code...
Apple Maps Mapping Service Unauthorized Access
The vulnerability of the Apple Maps mapping service in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Unity Parsec Installed (Windows)
Binary data unityparsecwininstalled.nbin...
Apple macOS Sequoia Information Disclosure Vulnerability
Apple macOS is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from an improvement in the editing of sensitive information, and can be exploited by an attacker to access sensitive user data...
Palo Alto Networks PAN-OS security vulnerabilities
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an authenticated administrator being able to read arbitrary files via the CLI...
CVE-2025-0150
Incorrect behavior order in some Zoom Workplace Apps for iOS before version 6.3.0 may allow an authenticated user to conduct a denial of service via network access...
CVE-2025-24044 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
CVE-2024-12010
A post-authentication command injection vulnerability in the ”zyUtilMailSend” function of the Zyxel AX7501-B1 firmware version V5.17ABPC.5.3C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...
CVE-2024-12009
CVE-2024-12009 : A post-authentication command injection in the ZyEE function affects Zyxel EX5601-T1 firmware up to V5.70(ACDZ.3.6)C0 and earlier, allowing an authenticated administrator to execute OS commands on the device. Documented impact is high (C/H/I/A) with network access and no user int...