Linux Distros Unpatched Vulnerability : CVE-2024-23984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

Linux Distros Unpatched Vulnerability : CVE-2019-10104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration for Tomcat, Jetty, Resin, or CloudBees with the default setting...

CVE-2025-20340: Uncontrolled Resource Consumption

A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service DoS condition on an affected device. This vulnerability is due to how Cisco IOS XR Software...

Cisco IOS XR Access Control Vulnerability

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. Cisco IOS XR suffers from an Access Control Error vulnerability that stems from improper access control of the management interface ACL, which can be exploited by an attacker to cau...

PT-2025-37063

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the management interface access control list ACL processing feature could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH,...

PT-2025-37065

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Address Resolution Protocol ARP implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm,...

CVE-2025-23262

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...

PT-2025-36121

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An arbitrary OS command may be executed on the product by a user who can log in to the web management interface. This allows for potential system compromise...

CVE-2025-23262

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...

CVE-2025-23262

CVE-2025-23262 concerns NVIDIA ConnectX: a vulnerability in the management interface where an attacker with local access can bypass authorization and modify configuration. The issue can lead to denial of service, privilege escalation, information disclosure, and data tampering, as described in mu...

CVE-2025-23256

CVE-2025-23256 affects NVIDIA BlueField: a vulnerability in the management interface could allow a locally authenticated attacker to cause incorrect authorization when modifying the configuration, potentially leading to denial of service, privilege escalation, information disclosure, and data tam...

PT-2025-36006

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX affected versions not specified Description: NVIDIA ConnectX contains an issue in the management interface that allows an attacker with local access to bypass authorization checks and modify the configuration. A successful...

CVE-2025-23256: Incorrect Authorization

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...

CVE-2025-23262: Incorrect Authorization

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...

spmi: mediatek: Fix UAF on device remove

...

CVE-2025-20326

Cisco Unified Communications Manager (Unified CM) and UCS SME web-based management interface CSRF vulnerability (CVE-2025-20326) allows an unauthenticated, remote attacker to perform arbitrary actions with the privileges of the affected user by tricking them into clicking a malicious link. Impact...

PT-2025-35808

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager EPNM affected versions not specified Description A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager EPNM may allow an authenticated, remote attacker to...

PT-2025-35946

Name of the Vulnerable Software and Affected Versions NVIDIA BlueField affected versions not specified Description NVIDIA BlueField contains an issue in the management interface. An attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit...

CVE-2025-20326: Cross-Site Request Forgery (CSRF)

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM Software and Cisco Unified CM Session Management Edition SME Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected device...

CVE-2025-20330: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...