2420 matches found
CVE-2019-15799
An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administrators when connecting to the device via SSH while their...
CVE-2019-16287
In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may be able to leverage the application filter bypass vulnerability to gain privileged access to create a file on the local file system whose presence puts the device in Administrative Mode, which will allow the attacker to executed command...
CVE-2025-1418
A low-privileged user can access information about profiles created in Proget MDM Mobile Device Management, which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive information including their usage in connected devices. This issue has been fixed...
PT-2025-22381 · Cisco · Cisco Secure Network Analytics Manager +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager affected versions not specified Description: A vulnerability in the API subsystem could allow an authenticated, remote attacker with low privileges to...
CVE-2025-20032
Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access...
CVE-2025-21100
Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-20034
Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the IntelR Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2025-42997
Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...
PT-2025-20868 · Siemens · Scalance Lpe9403
Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions Description: A vulnerability has been identified in SCALANCE LPE9403, allowing a privileged local attacker to restore backups that are outside the backup folder through path traversal attacks...
PT-2025-20811 · Sap · Sap Gateway Client
Name of the Vulnerable Software and Affected Versions: SAP Gateway Client affected versions not specified Description: The issue allows a high-privileged user to access restricted information beyond the application's scope, potentially leading to low impact on confidentiality, integrity, and...
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams
What do a source code editor, a smart billboard, and a web server have in common? They've all become launchpads for attacks—because cybercriminals are rethinking what counts as "infrastructure." Instead of chasing high-value targets directly, threat actors are now quietly taking over the...
CVE-2024-11861
EnerSys AMPA 22.09 and prior versions are vulnerable to command injection leading to privileged remote shell access...
FreeBSD : Mozilla -- Information leak (9fa8c4a2-2e85-11f0-a989-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9fa8c4a2-2e85-11f0-a989-b42e991fc52e advisory. [email protected] reports: An attacker with control over a content process could potentially leverag...
CVE-2024-12442 Command injection in EnerSys AMPA versions 24.04 through 24.16, inclusive
EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access...
EnerSys AMPA 安全漏洞
EnerSys AMPA is an industrial-grade battery management system from EnerSys, Inc. designed as an intelligent monitoring platform for power equipment. A security vulnerability exists in EnerSys AMPA version 22.09 and earlier, which stems from a command injection issue that could lead to privileged...
CVE-2025-20193
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.r This vulnerability is due to insufficient input validation. An attacker could exploit this...
CVE-2025-24348
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the wireless network configuration file via a crafted HTTP request...
CVE-2025-24348
CVE-2025-24348 affects the web interface of ctrlX OS (Network Interfaces). A remote authenticated, low-privilege attacker can manipulate the wireless network configuration file using a crafted HTTP request. Exploitation status is not detailed in the provided docs; CVSS v3.1 base score is 5.4 (Med...