12577 matches found
CVE-2025-20143
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges o...
CVE-2025-20209 Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability
A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...
CVE-2025-20144 Cisco IOS XR Software Access Control List Bypass Vulnerability
A vulnerability in the hybrid access control list ACL processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific configuration of the hybrid ACL exists. ...
CVE-2025-20143 Cisco IOS XR Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges o...
CVE-2025-20143
CVE-2025-20143 concerns Cisco IOS XR Software: a vulnerability in the boot process due to insufficient module verification during software loading. An authenticated, high-privilege local attacker could bypass Secure Boot and load unverified binaries, potentially controlling boot configuration and...
Cisco IOS XR Software CLI Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI...
Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability
A vulnerability in the hybrid access control list ACL processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific configuration of the hybrid ACL exists. ...
Cisco IOS XR Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges o...
RHSA-2025:2654 Red Hat Security Advisory: libxml2 security update
Bulletin has no description...
PT-2025-11045 · Ibm · Ibm App Connect Enterprise Certified Container
Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise Certified Container versions 7.2 through 12.8 Description: The issue is due to improper validation of server-side input, which could allow an authenticated user to cause a denial of service in the App Connect flow...
PT-2025-16812 · Unknown · Telecontrol Server Basic
Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...
OPENSUSE-SU-2025:14883-1 nebula-1.9.5-2.1 on GA media
These are all security issues fixed in the nebula-1.9.5-2.1 package on the GA media of openSUSE Tumbleweed...
Oracle Linux 9 : libxml2 (ELSA-2025-2679)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2679 advisory. - Fix CVE-2024-56171 RHEL-80128 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...
2025-03 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5053596)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2025-03 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5053606)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
2025-03 Dynamic Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5053606)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
Security Bulletin: A Security Vulnerability was discoverd in IBM Security Verify Access and IBM Verify Identity Access (CVE-2025-0161)
Summary A Security Vulnerability was addressed in IBM Security Verify Access and IBM Verify Identity Access where a local user could execute arbitrary code. Vulnerability Details CVEID:CVE-2025-0161 DESCRIPTION: IBM Security Verify Access Appliance could allow a local user to execute arbitrary co...
CVE-2025-27617 Pimcore Vulnerable to SQL Injection in getRelationFilterCondition
Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue...