Lucene search
+L

15471 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•6 views

CVE-2025-28201: Improper Access Control

An issue in Victure RX1800 ENV1.0.0r12110933 allows physically proximate attackers to execute arbitrary code or gain root access...

6.8CVSS6.4AI score0.0044EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2025/05/08 12:30 p.m.•1033 views

ByeDPIAndroid - App To Bypass Censorship On Android

Android application that runs a local VPN service to bypass DPI Deep Packet Inspection and censorship. This application runs a SOCKS5 proxy ByeDPI and redirects all traffic through it. Installation Or use Obtainium 1. Install Obtainium 2. Add the app by URL:...

7.2AI score
SaveExploits0References9
attackerkb
attackerkb
•added 2025/05/07 10:15 p.m.•12 views

CVE-2025-36546

On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based authentication is still allowed. For an attacker to exploit this vulnerability they must obtain the root user's SSH...

9.2CVSS5.8AI score0.00439EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2025/05/07 6:15 p.m.•15 views

CVE-2025-20201

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

6.7CVSS5.8AI score0.00172EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 6:15 p.m.•27 views

CVE-2025-20199

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS0.00167EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/05/07 6:15 p.m.•14 views

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00171EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2025/05/07 6:15 p.m.•10 views

CVE-2025-20199

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00167EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2025/05/07 6:15 p.m.•14 views

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00171EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/05/07 6:15 p.m.•10 views

CVE-2025-20200

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00172EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2025/05/07 6:15 p.m.•14 views

CVE-2025-20199

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00167EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/05/07 6:15 p.m.•15 views

CVE-2025-20201

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

6.7CVSS5.8AI score0.00172EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2025/05/07 6:15 p.m.•18 views

CVE-2025-20198

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00167EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2025/05/07 6:15 p.m.•25 views

CVE-2025-20200

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00172EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/07 6:15 p.m.•16 views

CVE-2025-20198

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS5.8AI score0.00167EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/07 6:15 p.m.•26 views

CVE-2025-20198

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

8.2CVSS0.00167EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/07 6:15 p.m.•18 views

CVE-2025-20188

A vulnerability in the Out-of-Band Access Point AP Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers WLCs could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system. Th...

10CVSS7.1AI score0.27488EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/05/07 5:44 p.m.•27 views

CVE-2025-20201

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

6.7CVSS0.00172EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 5:44 p.m.•73 views

CVE-2025-20200

The CVE-2025-20200 entry describes a privilege-escalation vulnerability in Cisco IOS XE Software CLI. An authenticated local attacker with privilege level 15 can exploit insufficient input validation when processing specific configuration commands to elevate to root on the device’s operating syst...

8.2CVSS6.6AI score0.00172EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/07 5:39 p.m.•35 views

CVE-2025-20197

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific...

6.7CVSS6.6AI score0.00171EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/05/07 12:48 p.m.•27 views

oath-toolkit: Local root exploit in a PAM module

A vulnerability was found in a PAM module, the oath-toolkit. The module gained a feature that allowed placing the OTP state file, called the usersfile, in the home directory of the to-be-authenticated user. The PAM module performed unsafe file operations in the users' home directories. Since PAM...

7.1CVSS5.7AI score0.00339EPSS
SaveExploits0References4
Rows per page
Query Builder