CVE-2025-2268

CVE-2025-2268 affects HP LaserJet MFP M232-M237Printer Series. Vulnerability arises from handling specially crafted IPP requests, enabling a denial-of-service. Impact per sources: network attack, low complexity, no user interaction; availability impact is high. Remediation: HP recommends updating...

CVE-2025-2268 HP LaserJet MFP M232-M237 Printer Series - Potential Denial of Service

The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol IPP...

ipv6: Fix soft lockups in fib6_select_path under high next hop churn

...

CVE-2024-52812

LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service e.g. kuiperUser role can inject a cross-site scripting payload into the rule id parameter. Then, after any user with access to this service e.g...

[SECURITY] Fedora 40 Update: tigervnc-1.15.0-2.fc40

Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...

Espressif ESP-IDF 安全漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China Loxin Espressif. A security vulnerability exists in Espressif ESP-IDF version 5.3.0, which stems from insecure permissions and could lead to authentication bypass...

The vulnerability of the filtering function for outgoing packets in IPv4 and IPv6 on the Cisco IOS XR operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the IPv4 and IPv6 outgoing packet filtering function in the Cisco IOS XR operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions...

CVE-2025-2147

A vulnerability was found in Beijing Zhide Intelligent Internet Technology Modern Farm Digital Integrated Management System 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to files or directories accessible. It is possible to launch the attack...

AZL-58469 CVE-2025-22870 affecting package packer for versions less than 1.9.5-9

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NOPROXY environment variable is set to ".example.com", a request to "::1%25.example.com:80 will incorrectly match and not be proxied...

CVE-2025-20146

A vulnerability in the Layer 3 multicast feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an unauthenticated, remote attacker to cause a line card to reset,...

CVE-2025-20209 Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...

Cisco IOS XR 输入验证错误漏洞

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An input validation error vulnerability exists in Cisco IOS XR that stems from incorrect handling of malformed IPv4 multicast packets, which could result in a line card reset, leading to a denial of service...

Cisco IOS XR 访问控制错误漏洞

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. An access control error vulnerability exists in Cisco IOS XR that stems from incorrect handling of IPv4 packets and could lead to bypassing configured access control lists...

Cisco IOS XR 安全漏洞

Cisco IOS XR is an operating system developed by the American company Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS XR. The vulnerability stems from the incorrect handling of malformed IKEv2 packets. An attacker could exploit the vulnerability to cause a...

KB5053593: Cumulative security update for Internet Explorer: March 11, 2025

None None...

CVE-2025-0071

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

CVE-2025-0071 Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impac...

Tinxy 安全漏洞

Tinxy is an IoT product application from Tinxy, Inc. A security vulnerability exists in Tinxy that stems from storing plaintext credentials in the firmware, which could lead to credential disclosure...