Lucene search
+L

9111 matches found

NCSC
NCSC
•added 2025/09/25 10:42 a.m.•96 views

Vulnerabilities fixed in Cisco IOS and Cisco IOS XE Software

Cisco has fixed vulnerabilities in Cisco IOS and Cisco IOS XE Software. The vulnerabilities include several issues, including a buffer overflow in the command-line interface CLI that can lead to unexpected device restarts and a vulnerability in the TACACS+ protocol implementation that allows...

8.8CVSS6.9AI score0.39447EPSS
SaveExploits2References13
Tenable Nessus
Tenable Nessus
•added 2025/09/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2025-59691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or...

3.7CVSS5.9AI score0.00218EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/24 5:14 p.m.•6 views

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

6CVSS6.8AI score0.00161EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/24 5:14 p.m.•41 views

CVE-2025-20149

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a buffer overflow. An attacker with a...

6.5CVSS0.0012EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/24 5:14 p.m.•1 views

CVE-2025-20149

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a buffer overflow. An attacker with a...

6.5CVSS6.5AI score0.0012EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/24 5:14 p.m.•76 views

CVE-2025-20149

CVE-2025-20149 affects Cisco IOS and IOS XE CLI, where a buffer overflow in the CLI could be triggered by crafted commands from a low-privileged, authenticated user to cause an unexpected device reload (DoS). The vulnerability is local-attack accessible (LOCAL), with LOW privileges required and n...

6.5CVSS6.5AI score0.0012EPSS
SaveExploits0References1Affected Software2
Cisco
Cisco
•added 2025/09/24 4:00 p.m.•15 views

Cisco IOS XE Software CLI Argument Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments th...

6CVSS7.2AI score0.00161EPSS
SaveExploits0References1
Cisco
Cisco
•added 2025/09/24 4:00 p.m.•47 views

Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a buffer overflow. An attacker with a...

6.5CVSS6.9AI score0.0012EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/24 12:00 a.m.•9 views

Google Gemini CLI Installed (Windows)

Binary data googlegeminicliwininstalled.nbin...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/24 12:00 a.m.•5 views

Google Gemini CLI Installed (Linux/UNIX)

Binary data googlegeminiclinixinstalled.nbin...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/24 12:00 a.m.•3 views

Google Gemini CLI Installed (macOS)

Binary data googlegeminiclimacosinstalled.nbin...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/24 12:00 a.m.•16 views

PT-2025-39306

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the Command Line Interface CLI of Cisco IOS XE Software that could allow a local attacker with administrative privileges to execute arbitrary commands as root o...

6.7CVSS6.7AI score0.00161EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2025/09/23 12:00 a.m.•15 views

The vulnerability of the command-line interface of the software-hardware device for managing program-defined networks from HPE Aruba Networking EdgeConnect SD-WAN allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface of the HPE Aruba Networking EdgeConnect SD-WAN software-defined networking solution is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS6.1AI score0.00642EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/09/23 12:00 a.m.•16 views

RHEL 10 : command-line-assistant (RHSA-2025:16345)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16345 advisory. The command-line-assistant package provides a simple wrapper to interact with RAG. Security Fix: command-line-assistant: Improper Access Control in...

7.7CVSS5.6AI score0.00232EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/09/23 12:00 a.m.•8 views

RHEL 9 : command-line-assistant (RHSA-2025:16346)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16346 advisory. The command-line-assistant package provides a simple wrapper to interact with RAG. Security Fix: command-line-assistant: Improper Access Control in...

7.7CVSS5.6AI score0.00232EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/09/23 12:00 a.m.•10 views

The vulnerability of the command-line interface (CLI) of the software-defined networking management hardware from HPE Aruba Networking EdgeConnect SD-WAN allows a attacker to escalate their privileges and execute arbitrary commands.

The vulnerability of the command-line interface CLI of the software-defined networking management software from HPE Aruba Networking EdgeConnect SD-WAN is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

9CVSS6AI score0.00457EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/09/23 12:00 a.m.•13 views

Salesforce CLI 安全漏洞

Salesforce CLI is a command line tool from Salesforce, Inc. that interacts with the Salesforce platform. A security vulnerability exists in Salesforce CLI versions prior to 2.106.6 that stems from an uncontrolled search path element that could lead to the replacement of trusted executables...

8.8CVSS9.1AI score0.00443EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/22 8:26 p.m.•147 views

CVE-2025-59532

CVE-2025-59532 affects OpenAI Codex CLI (v0.2.0–0.38.0). A sandbox configuration bug caused the model-generated cwd to be treated as the sandbox’s writable root, enabling arbitrary file writes and command execution outside the user’s session workspace. The issue did not impact the network-disable...

8.6CVSS5.7AI score0.00874EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/22 10:02 a.m.•21 views

RHSA-2025:16346 Red Hat Security Advisory: command-line-assistant security update

Bulletin has no description...

7.7CVSS6.9AI score0.00232EPSS
SaveExploits0References7
OSV
OSV
•added 2025/09/22 10:02 a.m.•30 views

RHSA-2025:16345 Red Hat Security Advisory: command-line-assistant security update

Bulletin has no description...

7.7CVSS6.9AI score0.00232EPSS
SaveExploits0References7
Rows per page
Query Builder