2209 matches found
CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2024-35187
Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, attackers who achieved Arbitrary Code Execution as the stalwart-mail user including web interface admins can gain complete root access to the system. Usually, system services are run as a separate user not as root to...
Elber Communications Equipment
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker unauthorized administrative access to the affected device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this these vulnerabilities, such as:...
PT-2025-5690 · Elber · Elber
Name of the Vulnerable Software and Affected Versions: Elber products affected versions not specified Description: The issue allows unauthorized access to the password management functionality, enabling attackers to manipulate the endpoint and overwrite any user's password within the system. This...
MAL-2025-1166 Malicious code in paytm-blink-checkout-vue3-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53da4c93e68194060525f1ea8d686d00c5bbe1e73fa09bf04fd0ccfe8de97e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Local privilege escalation due to unquoted search path vulnerability
...
Schneider Electric Power Logic
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to modify data or cause a denial-of-service condition on web interface functionality. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...
Rockwell Automation FactoryTalk
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...
SUSE SLES15 Security Update : kernel (Live Patch 27 for SLE 15 SP4) (SUSE-SU-2025:0249-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0249-1 advisory. This update for the Linux Kernel 5.14.21-15040024122 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed...
SUSE SLES15 Security Update : kernel (Live Patch 26 for SLE 15 SP4) (SUSE-SU-2025:0264-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0264-1 advisory. This update for the Linux Kernel 5.14.21-15040024119 fixes several issues. The following security issues were fixed: - CVE-2024-36971: Fixed...
CVE-2025-24121
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...
CVE-2025-24130
An application may be able to modify protected parts of the file system due to a vulnerability in macOS addressed with improved checks. This issue impacts several versions and has been resolved in macOS Sequoia 15.3 , macOS Sonoma 14.7.3 , and macOS Ventura 13.7.3 . Specific exploit details or ve...
CVE-2024-54146
Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the template function of hosttemplates.php using the graphtemplate parameter. This vulnerability is fixed in 1.2.29...
Advisory ROSA-SA-2025-2580
software: opensc 0.23.0 OS: ROSA-CHROME packageevrstring: opensc-0.23.0-2 CVE-ID: CVE-2023-40660 BDU-ID: 2024-02589 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the OpenSC smart card software toolkit and libraries is related to the fact that token/card authentication by one process can perform...
mySCADA myPRO Manager
RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary commands or disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities,...
MAL-2025-329 Malicious code in ai-plugin-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375f6ac1b62a76dd86681b0fc33bfe8a4162eb0ff032e0d0c96e5bb8735d7953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-21563
...
CVE-2025-21558
The CVE-2025-21558 entry concerns Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions are 20.12.1.0–20.12.21.5, 21.12.1.0–21.12.20.0, and 22.12.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access over HTTP to compro...
