27224 matches found
CVE-2025-20314
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...
CVE-2025-52906 TOTOLINK X6000R Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...
CVE-2025-52906 TOTOLINK X6000R Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...
CVE-2025-52906
Summary (grounded in provided documents): TOTOLINK X6000R firmware versions up to and including V9.4.0cu.1360_B20241207 are affected by an OS Command Injection caused by improper neutralization of special elements in OS commands. This vulnerability could allow an attacker to execute arbitrary com...
CVE-2025-20160
Cisco IOS and IOS XE TACACS+ vulnerability (CVE-2025-20160): the TACACS+ implementation fails to properly verify the configured shared secret, enabling unauthenticated remote attackers to read unencrypted TACACS+ messages or bypass authentication. This can lead to exposure of sensitive informatio...
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service DoS condition on an affected device that is running Cisco IOS...
Cisco IOS XE Software for Catalyst 9000 Series Switches Denial of Service Vulnerability
A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic. This vulnerability is due to improper handling of crafte...
Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to a buffer overflow. An attacker with a...
CVE-2025-47314 Improper Input Validation in Automotive Software platform based on QNX
Memory corruption while processing data sent by FE driver...
CVE-2025-27077 Use After Free in Automotive Software platform based on QNX
Memory corruption while processing message in guest VM...
PT-2025-39312
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw in Cisco IOS XE Software may allow an attacker with level-15 privileges or physical access to a device to execute persistent code during boot and compromise the system’s...
Cisco IOS和Cisco IOS XE 安全漏洞
Cisco IOS and Cisco IOS XE are both products of Cisco, Inc.Cisco IOS is a suite of operating systems developed for its network devices.Cisco IOS XE is a single operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE...
The vulnerability of the `assertSafeToStartCustomActivity` function in the `AppRestrictionsFragment.java` file of the Android operating system allows a violator to elevate their privileges.
The vulnerability of the assertSafeToStartCustomActivity function in the AppRestrictionsFragment.java file of the Android operating system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to gain increased privileges...
The vulnerability of the Android operating system, related to errors in information processing, allows a perpetrator to disclose protected information.
The vulnerability of the Android operating system is related to errors in information processing. Exploiting this vulnerability can allow a perpetrator to disclose protected information...
PT-2025-39296
Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the implementation of the TACACS+ protocol that may allow a remote attacker to view sensitive data or bypass authentication. The issue...
Cisco IOS和Cisco IOS XE Software 授权问题漏洞
Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is a network operating system. An authorization issue vulnerability exists in Cisco IOS and Cisco IOS XE Software that stems from not...
Cisco IOS XE 安全漏洞
Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A security vulnerability exists in Cisco IOS XE that stems from improper package...
CVE-2025-9588
CVE-2025-9588 describes an OS command injection in Iron Mountain Archiving Services Inc. EnVision prior to 250563, caused by improper neutralization of special elements in input that could lead to command execution. The vulnerability impacts EnVision versions before 250563 and is rated CRITICAL (...
Iron Mountain enVision 操作系统命令注入漏洞
Iron Mountain enVision is a document archiving and management software from Iron Mountain, Inc. An operating system command injection vulnerability exists in versions prior to Iron Mountain enVision 250563, which stems from improper neutralization of a special element that could lead to OS comman...
