Linux Distros Unpatched Vulnerability : CVE-2021-2087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the audit subsystem when manipulating log prefixes. An attacker can execute unauthorized code and gain network access by bypassing intended restrictions on privileged API operators. Note: This is exploitable...

Linux Distros Unpatched Vulnerability : CVE-2020-12659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.6.7. xdpumemreg in net/xdp/xdpumem.c has an out- of-bounds write by a user with the CAPNETADMIN capability...

Linux Distros Unpatched Vulnerability : CVE-2025-7001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that could have allowed...

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center...

CVE-2025-48394

CVE-2025-48394 affects Eaton CLI (and related Eaton devices noted in connected sources). A privileged, authenticated attacker could modify the contents of a non-sensitive file by traversing the path in the CLI’s limited shell. The issue is mitigated by a fix in the latest Eaton-supplied version a...

CVE-2025-6205

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

CVE-2025-21018

Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory...

Eaton Rack PDU G4 安全漏洞

The Eaton Rack PDU G4 is a vertical assembly power unit from Eaton Corporation USA. A security vulnerability exists in Eaton Rack PDU G4 version 3.5.0 and earlier, which stems from privileged access to potentially modify the contents of non-sensitive files via a CLI limited shell...

CVE-2025-6205

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

CVE-2025-6205

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

EUVD-2025-23493

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

CVE-2025-6205

DELMIA Apriso CVE-2025-6205 is a missing authorization vulnerability affecting Release 2020–2025 that could allow an attacker to gain privileged access to the application. The underlying issue is broken access control via missing authorization checks on the message processing endpoint, enabling p...

CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application...

PT-2025-31803

Name of the Vulnerable Software and Affected Versions DELMIA Apriso versions 2020 through 2025 Description A missing authorization check exists in DELMIA Apriso. This issue could allow an attacker to gain privileged access to the application. The vulnerability affects manufacturing environments,...

Dassault Systèmes DELMIA Apriso 安全漏洞

Dassault Systèmes DELMIA Apriso is an interactive manufacturing application for digital enterprises from Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes DELMIA Apriso versions 2020 to 2025 that stems from a lack of authorization and could result in gaining privilege...

CVE-2025-53695

OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access 'root' user to the device firmware...

CVE-2025-53695

CVE-2025-53695 affects Johnson Controls’ iSTAR Ultra family (Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2). The vulnerability is an OS command injection in the web application that, when exploited by an authenticated attacker, can grant root-level access to the device firmware. Public sources ...

The vulnerability of the rgxfw_write_robustness_buffer() function in the Driver Development Kit (DDK) toolset allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rgxfwwriterobustnessbuffer function in the Driver Development Kit DDK toolset is related to context privilege switching errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...