The vulnerability of the mtk_star_emac.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtkstaremac.c component in the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s USB kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s USB kernel component is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ice_vc_add_fdir_fltr() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the icevcaddfdirfltr function in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xen-netfront.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xen-netfront.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the wcd937x_soc_codec_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wcd937xsoccodecprobe function in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a failure in the system’s authentication process.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a perpetrator to cause a system failure...

CVE-2025-20293

creationtimestamp| type| source ---|---|--- 2025-09-26 08:27:34+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-cisco-ios-ja-ios-xe-laitteissa...

SonarQube 操作系统命令注入漏洞

SonarQube is a code inspection tool from Sonar Open Source. An operating system command injection vulnerability exists in SonarQube versions 4.0.0 through prior to 6.0.0, which stems from a failure to properly validate user input on the Windows runner and could lead to arbitrary command execution...

TOTOLINK X6000R OS Command Injection Vulnerability

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

Dell Data Domain OS Auth Bypass (DSA-2025-159)

According to its self-reported version number, the version of Dell Data Domain OS is affected by an auth bypass vulnerability as disclosed in the DSA-2025-159 advisory: - Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15,...

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Interconnect switches allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Connectors is related to access control violations. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

CVE-2025-11005 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

CVE-2025-52906

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2025-20293

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...

CVE-2025-20363

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker Cisco ASA and FTD Software...

Cisco Secure Firewall Adaptive Security Appliance Software, Secure Firewall Threat Defense Software, IOS Software, IOS XE Software, and IOS XR Software Web Services Remote Code Execution Vulnerability

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance ASA Software, Cisco Secure Firewall Threat Defense FTD Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker Cisco ASA and FTD Software...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software

Cisco has warned of a high-severity security flaw in IOS Software and IOS XE Software that could allow a remote attacker to execute arbitrary code or trigger a denial-of-service DoS condition under specific circumstances. The company said the vulnerability, CVE-2025-20352 CVSS score: 7.7, has bee...

Cisco多款产品 安全漏洞

Cisco IOS and others are products of Cisco USA.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XR is a set of operating systems developed for its network devices.Cisco IOS XE is an operating system. A security vulnerability exists in various Cisco products that...

Flock Safety The Bravo Compute Box 安全漏洞

Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from the acceptance of the default Thundercomm TurboX 6490 Firehose loader, which could lead to ...