343812 matches found
CVE-2025-3916
CWE-121: Stack-based Buffer Overflow vulnerability exists that could cause local attackers being able to exploit these issues to potentially execute arbitrary code while the end user opens a malicious project file SSD file provided by the attacker...
CVE-2025-3916
CVE-2025-3916 concerns Schneider Electric EcoStruxure Power Build Rapsody. A stack-based buffer overflow (CWE-121) could allow a local attacker to potentially execute arbitrary code when a user opens a malicious SSD file, per multiple sources. The vulnerability is locally exploitable with user in...
Unauthorized modification of global threat feeds
...
curl: CRLF Injection in `--proxy-header` allows extra HTTP headers (CWE-93)
Hello Team, There is a bug in curl where a user can inject new HTTP headers into a proxy request by using special characters in the --proxy-header option. This is done by adding \r\n carriage return + line feed inside the header value. This breaks the HTTP format and lets the user create more...
Security Bulletin: A remote code execution vulnerability affect IBM Business Automation Workflow - CVE-2025-27363
Summary IBM Business Automation Workflow containers package a vulnerable version of freetype. Vulnerability Details CVEID:CVE-2025-27363 DESCRIPTION: An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting to parse font...
CVE-2025-23180
CWE-250: Execution with Unnecessary Privileges...
CVE-2025-23179
CWE-798: Use of Hard-coded Credentials...
CVE-2025-23178
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
CVE-2025-23181
CVE-2025-23181 affects Ribbon Communications Apollo 9608 SBC; root cause is an unnecessary privileged operation in v9.6R3, enabling Execution with Unnecessary Privileges. CVSS 3.1 base score 8.0 (HIGH) with Adjacent attack vector, Low attack complexity, Low privileges required, no user interactio...
CVE-2025-23178
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
CVE-2025-23179
CVE-2025-23179 affects Ribbon Communications Apollo 9608 SBC. The issue is a trust management weakness caused by hard-coded credentials (CWE-798). Severity per the CVSS 3.1 entry is MEDIUM (AV: adjacent, AC: low, PR: low, UI: none, S: unchanged, C:L/I:L/A:L). Reported sources consistently describ...
CVE-2025-23179 Ribbon Communications - CWE-798: Use of Hard-coded Credentials
CWE-798: Use of Hard-coded Credentials...
CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
CVE-2025-23177
CVE-2025-23177 affects Ribbon Communications Apollo 9608 SBC. Connected sources identify the issue as CWE-427: Uncontrolled Search Path Element, with specific mentions of Apollo 9608 version v9.6R3 being implicated (PT-2025-18181 and CNNVD-202504-3975 align on this version). The Red Hat/NVD/CVE r...
PT-2025-18188 · Ribbon Communications · Apollo 9608
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to execution with unnecessary privileges, as described by CWE-250. No additional details are provided about the nature of the issue, affected devices, or real-world...
Case Study: Fine-Tuning Small Language Models for Accurate and Private CWE Detection in Python Code
Large Language Models LLMs have demonstrated significant capabilities in understanding and analyzing code for security vulnerabilities, such as Common Weakness Enumerations CWEs. However, their reliance on cloud infrastructure and substantial computational requirements pose challenges for analyzi...
CVE-2025-23176
CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...
CVE-2025-23175
CVE-2025-23175 relates to a multiple XSS (CWE-79) exposure associated with Tecnick TCExam. Connected sources indicate the vulnerable software is Tecnick TCExam, including version 16.3.2 per CNNVD, with reports in PT-Security citing the Tecnick/Tcexam name. The documents do not provide concrete ex...