Lucene search
+L

6172 matches found

CNNVD
CNNVD
added 2025/10/21 12:0 a.m.6 views

Zyxel ATP series firmware和Zyxel USG FLEX series firmware 操作系统命令注入漏洞

Zyxel ATP series firmware and Zyxel USG FLEX series firmware are both products of the Chinese company Zyxel.Zyxel ATP series firmware is a series of firewall firmware.Zyxel USG FLEX series firmware is a series of Zyxel ATP series firmware is a series of firewall firmware. The Zyxel ATP series...

7.2CVSS9.7AI score0.01484EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/21 12:0 a.m.7 views

Oracle Database Server 安全漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Unified Audit versions 23.4 through 23.9 of Oracle Database Server...

2.7CVSS7.1AI score0.00254EPSS
SaveExploits0References2
hivepro
hivepro
added 2025/10/20 5:2 p.m.9 views

What Is a Platform for Continuous Exposure Assessment?

You can’t protect what you don’t know you have. In an environment of sprawling cloud instances, remote endpoints, and shadow IT, gaining a complete and accurate picture of your attack surface is a massive challenge. Periodic scans only provide a snapshot in time, missing assets that spin up and...

7AI score
SaveExploits0
hivepro
hivepro
added 2025/10/17 7:59 p.m.15 views

5 Types of Cybersecurity Assessment Tools Compared

Your organization’s assets are everywhere: on-premise servers, multi-cloud environments, remote endpoints, and countless applications. Trying to secure this sprawling digital footprint with siloed tools gives you a fragmented, incomplete picture of your risk. You might have one tool for cloud...

6.8AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/10/16 6:0 p.m.7 views

Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

We’re honored to share that Microsoft has again been recognized as a Leader in the2025 Gartner® Magic Quadrant™ for Security Information and Event Management SIEM.1 We believe this recognition reinforces Microsoft Sentinel's position as an industry-leading, cloud and AI-powered SIEM—designed to...

7AI score
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2025/10/16 6:0 p.m.9 views

Microsoft named a Leader in the 2025 Gartner® Magic Quadrant™ for SIEM

We’re honored to share that Microsoft has again been recognized as a Leader in the2025 Gartner® Magic Quadrant™ for Security Information and Event Management SIEM.1 We believe this recognition reinforces Microsoft Sentinel's position as an industry-leading, cloud and AI-powered SIEM—designed to...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/10/16 4:56 p.m.7 views

CVE-2025-20351

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web ...

6.1CVSS6.7AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/16 4:56 p.m.8 views

CVE-2025-20350

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to a buffer overflow...

7.5CVSS7.2AI score0.0045EPSS
SaveExploits0References1
Veeam
Veeam
added 2025/10/16 12:0 a.m.19 views

Service Provider Migration to Unified Veeam Data Cloud FAQ

Below are the most commonly asked questions. What is changing with my Veeam Data Cloud for Microsoft 365 experience? Veeam is transitioning Veeam Cloud Service Providers VCSPs and their customers to Veeam Data Cloud, a unified multi-workload interface. This new experience allows you to manage...

6.6AI score
SaveExploits0
NVD
NVD
added 2025/10/15 5:15 p.m.8 views

CVE-2025-20351

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web ...

6.1CVSS0.00268EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/15 5:15 p.m.6 views

CVE-2025-20351

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web ...

6.1CVSS6.1AI score0.00268EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/15 5:15 p.m.9 views

CVE-2025-20350

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to a buffer overflow...

7.5CVSS6.1AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/15 4:15 p.m.19 views

CVE-2025-20351

CVE-2025-20351 affects Cisco Desk Phone 9800 Series, IP Phone 7800/8800 Series, and Video Phone 8875 running Cisco SIP Software. The web UI fails to sufficiently validate user-supplied input, enabling unauthenticated remote XSS when a user is persuaded to click a crafted link. Impact could includ...

6.1CVSS6.4AI score0.00268EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/15 4:15 p.m.5 views

CVE-2025-20351 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of the web UI. This vulnerability exists because the web ...

6.1CVSS6.4AI score0.00268EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/15 4:15 p.m.12 views

CVE-2025-20350 Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability

A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to a buffer overflow...

7.5CVSS0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/15 4:15 p.m.24 views

CVE-2025-20350

CVE-2025-20350 affects Cisco Desk Phone 9800 Series, Cisco IP Phone 7800/8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software. The issue is a stack/heap buffer overflow when the device processes HTTP input in the web UI, leading to a DoS where the device reloads. Exploitation requir...

7.5CVSS6.9AI score0.0045EPSS
SaveExploits0References1Affected Software1
Qualys Blog
Qualys Blog
added 2025/10/15 2:10 p.m.12 views

Introducing TruLens for Enterprise TruRisk™ Management: Unified Threat Intelligence

CISOs and security leaders today face extraordinary challenges: the constant influx of vast quantities of fragmented threat data, information that lacks the context necessary for their unique organizations, and mounting operational gaps that hinder genuine risk reduction. The need has shifted fro...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.10 views

PT-2025-42572

Name of the Vulnerable Software and Affected Versions Dolby UDC versions 4.5 through 4.13 Description An out-of-bounds write exists in the Dolby Unified Decoder UDC when processing malformed Dolby Digital Plus DD+ bitstreams. The issue occurs in the evo priv.c file during the processing of...

9.8CVSS7.8AI score0.01589EPSS
SaveExploits1References67
RedhatCVE
RedhatCVE
added 2025/10/11 5:42 a.m.15 views

CVE-2025-11570

Versions of the package drupal-pattern-lab/unified-twig-extensions from 0.0.0 are vulnerable to Cross-site Scripting XSS due to insufficient filtering of data. Note: This is exploitable only if the code is executed outside of Drupal; the function is intended to be shared between Drupal and Patter...

4.8CVSS6.6AI score0.00203EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/10 6:30 a.m.10 views

EUVD-2025-33657

drupal-pattern-lab/unified-twig-extensions is vulnerable to XXS...

4.8CVSS6.4AI score0.00203EPSS
SaveExploits0References5
Rows per page
Query Builder