CVE-2025-7397

The CVE-2025-7397 issue affects Brocade ASCG’s ascgshell prior to version 3.3.0, where commands entered in the CLI history are stored in plain text. This creates a local, authenticated attacker’s risk of exposing passwords or sensitive data via history inspection, leading to unauthorized access a...

CVE-2025-7397 CLI history displays inline passwords

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

CVE-2025-7397: Cleartext Storage of Sensitive Information

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

@intlify/cli (>=0.9.0, <=0.11.3), @sfxcode/formkit-primevue (>=2.5.4, <=2.7.0) +5 more potentially affected by CVE-2025-53892 via @intlify/core (>=9.3.0-beta.27, <=9.14.1)

@intlify/core NPM version =9.3.0-beta.27, =0.9.0, =2.5.4, =2.14.1, =1.9.0, =1.16.0 - we-i18n 0.1.1 Source cves: CVE-2025-53892 Source advisory: OSV:GHSA-X8QP-WQQM-57PH...

@intlify/cli (>=0.9.0, <=0.11.3), @sfxcode/formkit-primevue (>=2.5.4, <=2.7.0) +5 more potentially affected by CVE-2025-53892 via @intlify/core (>=9.3.0-beta.27, <=9.14.1)

@intlify/core NPM version =9.3.0-beta.27, =0.9.0, =2.5.4, =2.14.1, =1.9.0, =1.16.0 - we-i18n 0.1.1 Source cves: CVE-2025-53892 Source advisory: MEND:CVE-2025-53892...

Fortinet FortiOS Buffer Overflow Vulnerability

Fortinet FortiOS is Fortinet's network security operating system used to provide firewall, VPN, intrusion prevention, and other security features. Fortinet FortiOS suffers from a buffer overflow vulnerability that stems from insufficient boundary checking of specially crafted CLI commands. An...

CVE-2025-24477

CVE-2025-24477 describes a heap-based buffer overflow in Fortinet FortiOS. Affects FortiOS versions 7.6.0–7.6.2, 7.4.0–7.4.7, and 7.2.4–7.2.12. Root cause: heap overflow triggered by specially crafted CLI commands in the cw_stad daemon, allowing privilege escalation. Initial reports indicate loca...

CVE-2025-24477

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command...

CVE-2025-24477: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command...

CLI history displays inline passwords

A vulnerability in the ascgshell, of Brocade ASCG before 3.3.0 stores any command executed in the Command Line Interface CLI in plain text within the command history. A local authenticated user that can access sensitive information like passwords within the CLI history leading to unauthorized...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: maven-stage0, confluent-kafka, gradle, apache-nifi-registry, nrjmx, zipkin, apicurio-registry, celeborn, apache-nifi, management-api-for-apache-cassandra-5.0, spdx-tools-java, apache-tika, sonarqube, dependency-track, logstash, wildfly, apache-activemq-artemis,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: maven-stage0, confluent-kafka, gradle, apache-nifi-registry, nrjmx, zipkin, apicurio-registry, celeborn, apache-nifi, management-api-for-apache-cassandra-5.0, spdx-tools-java, apache-tika, sonarqube, dependency-track, logstash, wildfly, apache-activemq-artemis,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: logstash, apache-nifi, confluent-kafka, zaproxy, elasticsearch-fips, apache-hop, jenkins, py3-vllm-cuda-12.4, elasticsearch, solr, flyway, apache-hop-fips, apicurio-registry, nrjmx, solr-fips, leiningen, apache-nifi-registry, spark-fips, airflow, hadoop-client-module...

Fedora 43 : lw-cli (2025-40bd0d18e6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-40bd0d18e6 advisory. Automatic update for lw-cli-0.7.0-3.fc43. Changelog Sat Jul 12 2025 Mikel Olasagasti Uranga - 0.7.0-3 - Adopt Go Vendor Tools - Closes rhbz2340803 rhbz235231...

CVE-2025-52988 Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a high privileged, local attacker to escalated their privileges to root. When a user provides specifically crafted argument...

CVE-2025-52986 Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a local, low privileged user to cause an impact to the availability of the device. When RIB sharding is enabled and a user executes one of...

[SECURITY] Fedora 41 Update: rust-nu-cli-0.99.1-6.fc41

CLI-related functionality for Nushell...

[SECURITY] Fedora 42 Update: rust-nu-cli-0.99.1-6.fc42

CLI-related functionality for Nushell...

@unhook/cli (>=0.9.3, <=0.13.1) potentially affected by CVE-2025-53548 via @clerk/express (>=1.6.0, <=1.7.0)

@clerk/express NPM version =1.6.0, =0.9.3, =0.13.1 Source cves: CVE-2025-53548 Source advisory: GHSA-9MP4-77WG-RWX9...

@unhook/cli (>=0.9.3, <=0.13.1) potentially affected by CVE-2025-53548 via @clerk/backend (>=2.0.0, <=2.1.0)

@clerk/backend NPM version =2.0.0, =0.9.3, =0.13.1 Source cves: CVE-2025-53548 Source advisory: GHSA-9MP4-77WG-RWX9...