10096 matches found
CVE-2025-20340 Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability
A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service DoS condition on an affected device. This vulnerability is due to how Cisco IOS XR Software...
CVE-2025-20340 Cisco IOS XR Address Resolution Protocol Broadcast Storm Vulnerability
A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service DoS condition on an affected device. This vulnerability is due to how Cisco IOS XR Software...
CVE-2025-20340
Cisco IOS XR Software contains an ARP processing vulnerability that can be triggered by an unauthenticated, adjacent attacker sending excessive ARP traffic to the management interface, causing a broadcast storm and DoS. Affected behavior includes degraded device performance, loss of management co...
Cisco IOS XR ARP Broadcast Storm Denial of Service Vulnerability
A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service DoS condition on an affected device. This vulnerability is due to how Cisco IOS XR Software...
CVE-2025-10221
Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...
OSV-2025-718 Heap-buffer-overflow in pcpp::ArpLayer::toString
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=443832078 Crash type: Heap-buffer-overflow READ 2 Crash state: pcpp::ArpLayer::toString pcpp::Packet::toStringList pcpp::Packet::toString...
PT-2025-37065
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm,...
PT-2025-37039
Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One / AxxonNet versions 2.0.4 and earlier Description: The ARP Agent component in AxxonSoft Axxon One / AxxonNet contains a flaw where sensitive information is inserted into log files. A local attacker can obtain plaintext...
CVE-2025-55317
Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-55245
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
CVE-2025-55245
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
Xbox Gaming Services Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-54107: Improper Resolution of Path Equivalence
Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...
PT-2025-36894
Name of the Vulnerable Software and Affected Versions: Xbox affected versions not specified Description: An improper link resolution issue before file access 'link following' exists in Xbox, potentially allowing a local attacker to elevate privileges. Recommendations: At the moment, there is no...
PT-2025-36896
Name of the Vulnerable Software and Affected Versions: Microsoft AutoUpdate affected versions not specified Description: An improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally. Recommendations: At the...
PT-2025-36849
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An improper resolution of path equivalence in Windows MapUrlToZone can allow an unauthorized attacker to bypass a security feature over a network. This security-feature bypass can affect th...
CVE-2025-55245: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Xbox allows an authorized attacker to elevate privileges locally...
Microsoft AutoUpdate for macOS < 4.80 Elevation of Privilege (September 2025)
The version of Microsoft AutoUpdate installed on the remote macOS ost is prior to 4.80. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate...