1747 matches found
Core Config Manager Privilege Escalation Command Injection
The vulnerability of the Core Config Manager CCM component of the Nagios XI IT infrastructure monitoring tool is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, execute arbitrary...
CVE-2025-63560
The KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder (Firmware v.1.20.0006) is vulnerable to a denial of service (DoS) attack. The root cause is an issue within the systemctrl API specifically affecting the System/reFactory component. A remote attacker can exploit this vulnerability to d...
CVE-2025-63560
An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component...
PT-2025-45341
Name of the Vulnerable Software and Affected Versions KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware version 1.20.0006 Description An issue allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component. Recommendations At the moment,...
CVE-2025-30479
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...
CVE-2025-46364
Dell CloudLink, prior to version 8.1.1, is affected by a vulnerability described as a CLI Escape vulnerability that a privileged user with a known password can exploit to gain control of the system. The issue affects the CLI escape mechanism and is documented across several feeds (NVD, Red Hat, C...
CVE-2025-46364
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...
CVE-2025-30479: Improper Neutralization of Special Elements used in an OS Command
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988894)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988894 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Fix a data-race around sysctltcpfwmarkaccept. While reading sysctltcpfwmarkaccept, it c...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989227)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989227 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix a data-race around sysctlfibsyncmem. While reading sysctlfibsyncmem, it can be changed...
CVE-2025-46364: Improper Privilege Management
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system...
EUVD-2024-55063
Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain root privileges on the underlying XI host. By abusing the migration workflow, an admin-level attacker could execute actio...
PT-2025-42823
Name of the Vulnerable Software and Affected Versions TP-Link Omada Gateway affected versions not specified Description An arbitrary OS command may be executed by a remote attacker. An unauthenticated attacker can potentially execute commands on the system. The issue allows for remote command...
kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...
PT-2025-49053
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SCMI debug subsystem. If the subsystem fails to initialize, the debug root may be missing, leading to a NULL descriptor. This condition is not...
EUVD-2025-33252
Memory corruption while performing SCM call...
CVE-2025-27059
CVE-2025-27059 is a memory corruption issue occurring when performing an SCM call in Qualcomm TZ firmware. The CVE entry and multiple connected sources (Red Hat, NVD, CVEList, CNNVD) describe memory corruption triggered during SCM calls, with the CVEList title explicitly noting use of an out-of-r...
EUVD-2007-6327
Malware in sbrugna...