54806 matches found
TencentOS Server 3: linuxptp (TSSA-2022:0255)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0255 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-40604: Download of Code Without Integrity Check
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution...
The vulnerability of the Nagios XI monitoring tool, related to the improper assignment of permissions for critical resources, allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Nagios XI monitoring tool is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...
TencentOS Server 4: edk2 (TSSA-2025:0336)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0336 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-65033
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticated user to pause or resume any poll, regardless of ownership. The system only uses the public pollId to identify polls, and it does not...
EUVD-2025-198234
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability allows any authenticated user to change the display names of other participants in polls without being an admin or the poll owner. By manipulating the...
EUVD-2025-198225
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference IDOR vulnerability allows any authenticated user to modify other participants’ votes in polls without authorization. The backend relies solely on the participantId parameter to...
CVE-2025-63220
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
CVE-2025-63220
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
SonicWall Email Security Affected By Multiple Vulnerabilities
1 CVE-2025-40604 - Download of Code Without Integrity Check VulnerabilityDownload of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system...
CVE-2025-63215
The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
PT-2025-47505
Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description Rallly, an open-source scheduling and collaboration tool, contains a flaw where an authenticated user can change votes in polls belonging to other participants without proper authorization. The backen...
CVE-2025-63220
The Sound4 FIRST audio processor's web-based management interface is vulnerable to Remote Code Execution (RCE) . The root cause is a failure in the firmware update mechanism to validate the integrity of the manual.sh script. An attacker can exploit this by injecting arbitrary commands into the sc...
CVE-2025-63219: Improper Access Control
The ITEL ISO FM SFN Adapter firmware ISO2 2.0.0.0, WebServer 2.0 is vulnerable to session hijacking due to improper session management on the /home.html endpoint. An attacker can access an active session without authentication, allowing them to control the device, modify configurations, and...
CVE-2025-65032: Authorization Bypass Through User-Controlled Key
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference IDOR vulnerability allows any authenticated user to change the display names of other participants in polls without being an admin or the poll owner. By manipulating the...
PT-2025-47463
Name of the Vulnerable Software and Affected Versions Sound4 FIRST affected versions not specified Description The Sound4 FIRST web-based management interface is susceptible to Remote Code Execution RCE through a maliciously crafted firmware update package. The system’s update process does not...
CVE-2025-63220
The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...
PT-2025-47509
Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description Rallly is a scheduling and collaboration tool. A security issue exists where an authenticated user can modify the display names of other participants in polls without authorization. This is possible b...
CVE-2025-65028: Improper Authorization
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference IDOR vulnerability allows any authenticated user to modify other participants’ votes in polls without authorization. The backend relies solely on the participantId parameter to...
CVE-2025-63219
The ITEL ISO FM SFN Adapter is vulnerable to session hijacking due to improper session management on the /home.html endpoint. This flaw affects firmware version ISO2 2.0.0.0 and WebServer 2.0 . An unauthenticated attacker can access an active session, potentially allowing them to control the devi...