CVE-2025-20199

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

CVE-2025-20197

This CVE (CVE-2025-20197) affects Cisco IOS XE Software and concerns a CLI input-validation flaw in config processing that enables a locally authenticated attacker with privilege level 15 to escalate to root on the device OS. The vulnerability arises from insufficient input validation when handli...

CVE-2025-20181

CVE-2025-20181 affects Cisco IOS Software on Catalyst 2960X/2960XR/2960CX/3560CX switches. Root cause: missing signature verification for files loaded during boot, enabling an attacker with physical access or a privileged user to execute persistent code at boot and break the chain of trust. Affec...

Cisco IOS XE Software Privilege Escalation (cisco-sa-iosxe-privesc-su7scvdp)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an...

Ubuntu: Security Advisory (USN-7496-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-4357

A vulnerability was found in Tenda RX3 16.03.13.11multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2025-4299 Tenda AC1206 openSchedWifi setSchedWifi buffer overflow

A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public...

grafana-11.5.4-1.1 on GA media (moderate)

grafana-11.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2025:15052-1 Rating: moderate Cross-References: CVE-2024-6104 CVE-2025-2703 CVE-2025-29923 CVE-2025-30204 CVE-2025-3454 CVSS scores: CVE-2024-6104 SUSE : 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N CVE-2025-2703 SUSE : 6.3...

CVE-2025-4254

PCMan FTP Server 2.0.7 is affected by a buffer overflow in the LIST Command Handler. The vulnerability originates from improper validation of input length/size, enabling remote exploitation and potentially causing denial of service. Exploitation details are disclosed in public references. Mitigat...

MozillaFirefox-138.0-1.1 on GA media (moderate)

MozillaFirefox-138.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15045-1 Rating: moderate Cross-References: CVE-2025-2817 CVE-2025-4082 CVE-2025-4083 CVE-2025-4085 CVE-2025-4086 CVE-2025-4087 CVE-2025-4088 CVE-2025-4089 CVE-2025-4090 CVE-2025-4091 CVE-2025-4092 CVSS scores: CVE-2025-2817 SU...

libsoup-3_0-0-3.6.5-3.1 on GA media (moderate)

libsoup-30-0-3.6.5-3.1 on GA media Announcement ID: openSUSE-SU-2025:15043-1 Rating: moderate Cross-References: CVE-2025-32907 CVSS scores: CVE-2025-32907 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-32907 SUSE : 8.7...

CVE-2025-4160

CVE-2025-4160 affects PCMan FTP Server up to version 2.0.7. Multiple sources describe a buffer‑overflow vulnerability in the LS Command Handler caused by improper validation of input length/size. The issue can be exploited remotely and has been characterized as potentially enabling a denial of se...

amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media (moderate)

amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15037-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7...

CVE-2025-3969

A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categoryimage leads to unrestricted upload...

CVE-2025-3960

A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched...

CVE-2025-4039

The CVE-2025-4039 entry affects PHPGurukul Rail Pass Management System 1.0, where the /admin/search-pass.php file’s searchdata parameter is vulnerable to SQL injection. External researchers report remote exploitation possibilities and publicly disclosed exploits. The exact affected functionality ...

govulncheck-vulndb-0.0.20250424T181457-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250424T181457-1.1 on GA media Announcement ID: openSUSE-SU-2025:15033-1 Rating: moderate Cross-References: CVE-2017-14992 CVE-2017-9232 CVE-2025-35965 CVE-2025-41395 CVE-2025-41423 CVSS scores: CVE-2017-14992 SUSE : 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affecte...

CVE-2025-2850

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...

kyverno-1.14.0-1.1 on GA media (moderate)

kyverno-1.14.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15029-1 Rating: moderate Cross-References: CVE-2025-22871 CVSS scores: CVE-2025-22871 SUSE : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2025-22871 SUSE : 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N...

CVE-2025-39527

Deserialization of Untrusted Data vulnerability in bestweblayout Rating by BestWebSoft rating-bws allows Object Injection.This issue affects Rating by BestWebSoft: from n/a through = 1.7...