895 matches found
CVE-2025-57105
The D-Link DI-7400G+ router is vulnerable to a command injection flaw in its jhttpd program. Specifically, the sub_478D28 function in mng_platform.asp and the sub_4A12DC function in wayos_ac_server.asp fail to sanitize the ac_mng_srv_host parameter, which is stored in NVRAM . An attacker can send...
PT-2025-34445 · D Link · Di-7400G+ Router
Name of the Vulnerable Software and Affected Versions: DI-7400G+ router affected versions not specified Description: The DI-7400G+ router contains a command injection flaw that enables attackers to execute arbitrary commands on the device. This issue affects the sub 478D28 function within mng...
CVE-2025-57105
The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...
The vulnerability of the Dell Encryption endpoint protection software (previously known as Dell Data Protection) and the Dell Security Management Server, related to improper handling of symbolic links before accessing files, allows attackers to exploit their privileges.
The vulnerability of the Dell Encryption endpoint protection software previously known as Dell Data Protection and the Dell Security Management Server security management server lies in the improper handling of symbolic links before accessing files. Exploiting this vulnerability can allow attacke...
The vulnerability of the XtremIO Management Server (XMS) on the Dell XtremIO storage platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the XtremIO Management Server XMS on the Dell XtremIO storage platform involves the disclosure of information through log files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-36611
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
CVE-2025-36611
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
CVE-2025-36611
Dell Encryption and Dell Security Management Server contain an Improper Link Resolution Before File Access ("Link Following") vulnerability affecting versions prior to 11.11.0. A local attacker could potentially escalate privileges by abusing link resolution behavior. The issue is fixed in versio...
Tenable Patch Management Server < 9.3.968.19 SQLi
The version of Tenable Patch Management Server installed on the remote host is prior to 9.3.968.19. It is, therefore, affected by an SQL injection vulnerability due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL...
CVE-2025-36611: Improper Link Resolution Before File Access
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
CVE-2025-53082
An 'Arbitrary File Deletion' in Samsung DMSData Management Server allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...
CVE-2025-53081
An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...
CVE-2025-53078
Deserialization of Untrusted Data in Samsung DMSData Management Server allows attackers to execute arbitrary code via write file to system...
CVE-2025-53079
Absolute Path Traversal in Samsung DMSData Management Server allows authenticated attacker Administrator to read sensitive files...
CVE-2025-53077
An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...
CVE-2025-53082
An 'Arbitrary File Deletion' in Samsung DMSData Management Server allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...
CVE-2025-53081
An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...
CVE-2025-53080
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in Samsung DMSData Management Server allows authenticated attackers to create arbitrary files in unintended locations on the filesystem...
PT-2025-31171 · Samsung · Samsung Dms
Name of the Vulnerable Software and Affected Versions: Samsung DMSData Management Server affected versions not specified Description: An absolute path traversal issue exists in Samsung DMSData Management Server. An authenticated attacker with Administrator privileges can read sensitive files...