CVE-2025-37124

The CVE-2025-37124 entry concerns HPE Aruba Networking EdgeConnect SD-WAN Gateways. Connected sources describe vulnerabilities in the device’s command-line interface (CLI) and Web API that could allow authenticated attackers to execute arbitrary system commands with root access, gain shell access...

CVE-2025-37128 Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2025-37128 Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2025-37124: Protection Mechanism Failure

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...

The vulnerability of the SetSysTimeCfg() function in Tenda AX3 Wi-Fi routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SetSysTimeCfg function in Tenda AX3 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the ntpServer parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the formSysCmd() function in D-Link DIR-619L router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSysCmd function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the /goform/setPptpUserList component in the Tenda RX3 router software allows a attacker to cause a service failure.

The vulnerability of the /goform/setPptpUserList component in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the html parser module HTMLParser in the Python programming language allows a hacker to trigger a service failure.

The vulnerability of the html parser module HTMLParser in the Python programming language is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the asn1_delete_structure() function in the Transport Layer Security library GnuTLS allows a attacker to cause a service failure.

The vulnerability of the asn1deletestructure function in the GnuTLS transport layer security library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of Oracle Java SE’s 2D software platform and the Oracle GraalVM virtual machine allows attackers to trigger a service failure.

The vulnerability of the Oracle Java SE 2D software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2025-10365

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

CVE-2025-10365 Authentication Bypass in Evertz SDVN

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

CVE-2025-10094 Improper Validation of Specified Quantity in Input in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large...

PT-2025-37317

Name of the Vulnerable Software and Affected Versions: Evertz SDVN 3080ipx-10G affected versions not specified Description: The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. The device exposes a web management interface on port 80, which is susceptib...

ROS-20250912-19

Vulnerability in the HTTP2 handler of Apache Tomcat application server is related to incorrect release of a resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

GitLab 10.7 < 18.1.6 / 18.2 < 18.2.6 / 18.3 < 18.3.2 (CVE-2025-10094)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to...

The vulnerability of the check_fw_type/split_fireware/check_FW function in the microprogramming software of Tenda AC15 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the checkfwtype/splitfireware/checkFW function in the microprogramming software of Tenda AC15 routers is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the Internet Key Exchange Version 2 (IKEv2) function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause service interruptions.

The vulnerability of the Internet Key Exchange Version 2 IKEv2 function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to the absence of memory release after the effective lifespan. Exploitation of this vulnerability can allow a malicious actor ...

Denial Of Service (DoS)

github.com/cri-o/cri-o is vulnerable to Denial Of Service DoS. The vulnerability is due to improper user creation handling due to reading the entire /etc/passwd file into memory when securityContext.runAsUser specifies a non-existent user, leading to excessive memory consumption and potential...

UTT 1200GW Buffer Overflow Vulnerability

The UTT 1200GW is an enterprise-grade wireless router from Atech Technology UTT designed to meet the networking needs of small to medium-sized businesses or large space office environments. The UTT 1200GW suffers from a buffer overflow vulnerability that originates from the sub4B48F8 function in...