12999 matches found
CVE-2025-30023
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack...
CVE-2025-30024
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...
CVE-2025-30025
The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation...
CVE-2025-30025
The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation...
CVE-2025-30025
CVE-2025-30025 affects Axis devices (Camera Station Pro, Camera Station, and Device Manager). A flaw in the communication protocol between the server process and the service control could lead to local privilege escalation. Reported fixes: Camera Station Pro 6.8, Camera Station 5.58, and Device M...
CVE-2025-30024
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...
CVE-2025-30024
Axis Communications Axis.Remoting protocol flaws in the client–server communication could enable a man-in-the-middle attack on Axis Device Manager and related Camera Station products. The CVE-2025-30024 entry specifically notes a MITM bypass of authentication/flow integrity, with an impact score ...
CVE-2025-30024
The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack...
CVE-2025-30023
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack...
CVE-2025-30023
Axis CVE-2025-30023 concerns a flaw in the Axis.Remoting/communication protocol between client and server that could allow an authenticated user to perform remote code execution. Affected products include AXIS Camera Station Pro, AXIS Camera Station, and AXIS Device Manager. The issue is fixed in...
CVE-2025-30023
The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack...
PT-2025-29201
Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The communication protocol used between the client and server has a flaw that could be leveraged to execute a man-in-the-middle attack. Recommendations At the moment, there is no...
CVE-2025-2523
The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in a failure during subtraction allowi...
CVE-2025-2522
The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may...
CVE-2025-2523 Lack of buffer clearing before reuse may result in incorrect system behavior.
The Honeywell Experion PKS and OneWireless WDM contains an Integer Underflow vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in a failure during subtraction allowi...
CVE-2025-2520
The Honeywell Experion PKS contains an Uninitialized Variable in the common Epic Platform Analyzer EPA communications. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which results in a dereferencing of an uninitialized pointer leading to...
CVE-2025-2522 Lack of buffer clearing before reuse may result in incorrect system behavior.
The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may...
CVE-2025-2522
The CVE-2025-2522 issue affects Honeywell Honeywell Experion PKS and OneWireless WDM, specifically in the Control Data Access (CDA) component. The vulnerability is described as a sensitive information in resource vulnerability that could be exploited to cause a communication channel manipulation ...
CVE-2025-2520
CVE-2025-2520 affects Honeywell Experion PKS. The root cause is an uninitialized variable in the common Epic Platform Analyzer (EPA) communications, which could allow an attacker to perform Communication Channel Manipulation and dereference an uninitialized pointer, leading to a denial of service...