CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-43245

CVE-2025-43245 describes a downgrade issue mitigated by added code-signing restrictions in macOS. The vulnerability affects macOS Sequoia 15.6, macOS Sonoma 14.7.7, and macOS Ventura 13.7.7, where an app may be able to access protected user data. The NVD entry specifies a high/critical risk profi...

CVE-2025-43185

CVE-2025-43185 relates to a downgrade issue in macOS Sequoia that could allow an app to access protected user data. The fixed version is macOS Sequoia 15.6, which implements additional code-signing restrictions to mitigate the issue. The public records describe the vulnerability as a downgrade/pa...

PT-2025-31373 · Tesla · Tesla Wall Connector

Name of the Vulnerable Software and Affected Versions: Tesla Wall Connector affected versions not specified Description: This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to...

(Pwn2Own) Tesla Wall Connector Firmware Downgrade Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Tesla Wall Connector devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack o...

CVE-2025-54596

CVE-2025-54596 affects Abnormal Security API: the endpoint /v1.0/rbac/users_v2/{USER_ID}/ (pre-2025-02-19) allows downgrading the privileges of other user accounts. CVSS v3.1 base score 4.3 (Medium) with Network attack vector, Low privileges required, No user interaction. Remediation cited: updat...

NewStart CGSL MAIN 7.02 : libssh Vulnerability (NS-SA-2025-0184)

The remote NewStart CGSL host, running version MAIN 7.02, has libssh packages installed that are affected by a vulnerability: - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that...

CVE-2025-53840

Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. However, the name of an object will not b...

PT-2025-29826

Name of the Vulnerable Software and Affected Versions Icinga DB Web versions 1.2.0 through 1.2.1 Description Icinga DB Web, a graphical interface for Icinga monitoring, allows users with access to Icinga Dependency Views to view hosts and services they are not authorized to access on the dependen...

GHSA-J47Q-RC62-W448 fastapi-guard is vulnerable to ReDoS through inefficient regex

Summary fastapi-guard detects penetration attempts by using regex patterns to scan incoming requests. However, some of the regex patterns used in detection are extremely inefficient and can cause polynomial complexity backtracks when handling specially crafted inputs. It is not as severe as...

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

Dell NetWorker Algorithm Downgrade (DSA-2025-268)

The version of Dell EMC NetWorker installed on the remote Windows host is affected by a vulnerability. Dell NetWorker, versions prior to 19.11.0.5 or 19.12.x through 19.12.0.1, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated...

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-36582

Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-36582

CVE-2025-36582 concerns Dell NetWorker, versions 19.12.0.1 and earlier, with a vulnerability titled “Selection of Less-Secure Algorithm During Negotiation (Algorithm Downgrade).” An unauthenticated attacker with remote access could potentially disclose information due to selecting a weaker algori...

PT-2025-27526 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions 19.12.0.1 and prior Description: The issue is related to a Selection of Less-Secure Algorithm During Negotiation, also known as an 'Algorithm Downgrade'. This could allow an unauthenticated attacker with remote access ...

CVE-2025-5825

Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Wallbox Commercial charging stations. An attacker must first obtain the...

CVE-2025-5825

CVE-2025-5825: Affects Autel MaxiCharger AC Wallbox Commercial. Root cause is insufficient validation of a firmware image during upgrade, enabling a downgrade path that can lead to remote code execution. Exploitation requires network-adjacent access and pairing of a malicious Bluetooth device, wi...