CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

6CVSS0.0015EPSS

Exploits0References1

CVE•added 2025/09/24 5:14 p.m.•43 views

CVE-2025-20338

CVE-2025-20338 affects Cisco IOS XE Software CLI. The root cause is insufficient validation of user-supplied arguments passed to specific CLI commands, allowing an authenticated administrator (level 15) to craft CLI input that can execute arbitrary commands as root on the device. According to Cis...

6.7CVSS6.8AI score0.0015EPSS

Exploits0References1Affected Software1

Positive Technologies•added 2025/09/24 12:0 a.m.•7 views

PT-2025-39295

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the Command Line Interface CLI of Cisco IOS Software and Cisco IOS XE Software. A local attacker with authentication may be able to cause...

6.5CVSS6.6AI score0.00113EPSS

Exploits0References6

Cvelist•added 2025/09/16 10:20 p.m.•11 views

CVE-2025-37130 Unrestricted Binary allows File Enumeration in Underlying Operating System

A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could allow an attacker to read sensitive data from the underlying file system...

6.5CVSS0.00296EPSS

Exploits0References1

Vulnrichment•added 2025/09/09 1:50 p.m.•3 views

CVE-2024-45325

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerabilities CWE-78 in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests...

6.7CVSS7.1AI score0.00479EPSS

Exploits0References1

Cvelist•added 2025/08/27 4:23 p.m.•8 views

CVE-2025-20295 Cisco UCS Manager Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any file on the file system of the underlying operating system of an affected device, including system files. This vulnerabili...

6CVSS0.00179EPSS

Exploits0References1

CNNVD•added 2025/08/13 12:0 a.m.•5 views

OpenAI Codex CLI 安全漏洞

OpenAI Codex CLI is an OpenAI open source lightweight coding agent software that runs in the terminal. A security vulnerability exists in OpenAI Codex CLI that stems from the fact that use of Codex CLI in a malicious context could lead to arbitrary file overwriting and potential remote code...

8.8CVSS7.8AI score0.00782EPSS

Exploits0References2

ATTACKERKB•added 2025/08/12 7:0 p.m.•2 views

CVE-2025-47857

A improper neutralization of special elements used in an os command 'os command injection' vulnerability CWE-78 in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands...

6.7CVSS6.2AI score0.00497EPSS

Exploits0References2Affected Software1