17823 matches found
CVE-2025-20213: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials...
CVE-2025-20122: Channel Accessible by Non-Endpoint
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input validation. An authenticated attacker wi...
CVE-2025-20200: Improper Check for Unusual or Exceptional Conditions
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...
CVE-2025-20198: Improper Check for Unusual or Exceptional Conditions
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...
CVE-2025-20199: Undefined Security Weakness
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)
The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...
CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3
CVE-2025-22872 affecting package cf-cli for versions less than 8.7.11-3. A patched version of the package is available...
Security Bulletin: Additional security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for April 2025.
Summary In addition to vulnerabilities announced in Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation...
Malware in drift-v1-cli
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
@ailinone/cli (>=0.0.1, <=0.0.10), @ailinone/dev-tool (>=0.0.1, <=0.0.69) +1 more potentially affected by unknown CVE via tree-sitter-r (0.0.1-security)
tree-sitter-r NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on tree-sitter-r and may be impacted: - @ailinone/cli =0.0.1, =0.0.1, =0.0.69 - @rkarim08/sia 1.0.0 Source cves: unknown CVE Source advisory: GHSA-HHHW-6FM7-R8FF...
amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media (moderate)
amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15037-1 Rating: moderate Cross-References: CVE-2025-30204 CVSS scores: CVE-2025-30204 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-30204 SUSE : 8.7...
OPENSUSE-SU-2025:15037-1 amber-cli-1.13.1+git20250329.c2e3bb8-1.1 on GA media
These are all security issues fixed in the amber-cli-1.13.1+git20250329.c2e3bb8-1.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in pretty-cli-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...
MAL-2025-191816 Malicious code in pretty-cli-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94cd11911ce2a0937d9e56087ce9487db18da5bb20df7f1f8948f8356d65c31d Contains an obfuscated code that will download and run a remote script. At the time of the analysis, the remote URLs were delivering empty results --- Category...
OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...
CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-18
CVE-2024-51744 affecting package dcos-cli for versions less than 1.2.0-18. A patched version of the package is available...
openthread:ot-cli-received-fuzzer: Stack-buffer-overflow in ot::Cli::Utils::OutputLine
Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4906207129436160 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ot-cli-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...
argocd-cli-2.14.10-1.1 on GA media (moderate)
argocd-cli-2.14.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:15006-1 Rating: moderate Cross-References: CVE-2025-29786 CVSS scores: CVE-2025-29786 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-29786 SUSE : 8.2...