CVE-2025-25005

Technical details about CVE-2025-25005 are not publicly provided in the connected documents. Monitor updates from Microsoft MSRC and advisories for affected versions, impact, and fixes.

CVE-2025-32004

CVE-2025-32004 concerns the Intel Edger8r Tool in the Intel SGX SDK. The issue is caused by improper input validation in the Edger8r Tool, which may permit an authenticated user to escalate privileges via local access. Documented impact indicates privilege escalation with local access, applicable...

CVE-2025-27537

Improper input validation for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2025-24296

CVE-2025-24296 affects Intel® E810 Ethernet firmware prior to 4.6. The issue is improper input validation in firmware, enabling a privileged user to cause a denial of service via local access. Intel attributes a local attack vector with low complexity and requires high privileges (per CVSS v3.1: ...

Microsoft Exchange Server Tampering Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities (CVE-2023-26125, CVE-2023-28155, CVE-2024-29018)

Summary Open source software is used by Astronomer with IBM as part of overall processing functionality. Vulnerability Details CVEID:CVE-2023-26125 DESCRIPTION: Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use...

Linux Distros Unpatched Vulnerability : CVE-2022-25271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow a...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-21477

CVE-2025-21477 is a Qualcomm closed‑source component DoS vulnerability described as improper input validation in the modem when processing CCCH data, triggered by the network sending data with invalid length. The issue results in a transient Denial of Service. Publicly accessible details show the...

CVE-2025-21477 Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length...

Apache Tomcat 10.1.0.M1 < 10.1.40 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.40security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid...

Apache Tomcat 10.1.0.M1 < 10.1.40 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.1.40. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.40security-10 advisory. - Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid...

Linux Distros Unpatched Vulnerability : CVE-2023-46589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82...

CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27212

CVE-2025-27212 describes an improper input validation in multiple UniFi Access devices that could allow a malicious actor with access to the UniFi Access management network to perform a command injection, resulting in remote code execution. Affected products and versions include: UniFi Access Rea...

CVE-2025-27211

CVE-2025-27211 affects EdgeMAX EdgeSwitch (versions 1.10.4 and earlier). The root cause is improper input validation in EdgeSwitch that enables command injection. Exploitation is possible from an adjacent network with no privileges and no user interaction required; impacts stated as high for conf...

Ubiquiti EdgeMAX EdgeSwitch 安全漏洞

Ubiquiti EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti USA. A security vulnerability exists in Ubiquiti EdgeMAX EdgeSwitch version 1.10.4 and prior versions, which stems from improper input validation and could lead to command injection...

GHSA-JR43-Q92Q-5Q82 Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2024-52279 Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not account for URL encoded input. This issue affects Apache Zeppelin: from 0.11.1 before 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue...

CVE-2025-30480

Dell PowerProtect Data Manager, versions prior to 19.19, contains an Improper Input Validation vulnerability in PowerProtect Data Manager. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files...