27974 matches found
CVE-2025-41748
An XSS vulnerability in pxcDot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41693
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-2296
CVE-2025-2296 affects EDK2 BIOS/edk2 components. The connected docs indicate a vulnerability in improper input validation that could allow arbitrary command execution and impact confidentiality, integrity, and availability, with local access required. Mitigations shown include patch/updated packa...
CVE-2025-40801
A vulnerability has been identified in COMOS V10.6 All versions V10.6.1, COMOS V10.6 All versions V10.6.1, JT Bi-Directional Translator for STEP All versions, NX V2412 All versions V2412.8900 with Cloud Entitlement bundled as NX X, NX V2506 All versions V2506.6000 with Cloud Entitlement bundled a...
CVE-2025-27020
Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...
CVE-2025-41693 Authenticated Denial-of-Service via SSH
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-41693 Authenticated Denial-of-Service via SSH
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-41693
CVE-2025-41693 affects PHOENIX CONTACT FL SWITCH (industrial Ethernet switch). Technical details across sources indicate the SSH feature can be abused by a low-privileged remote attacker to execute commands after login. The vulnerability leads to a persistent process that consumes resources and d...
CVE-2025-41749 Reflected XSS vulnerability in port_util.php
An XSS vulnerability in portutil.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php
An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
November 11, 2025—Hotpatch KB5068966 (OS Build 26100.7092)
None None...
November 11, 2025—KB5068908 (Security-only update)
None None...
October 14, 2025—KB5066837 (OS Build 10240.21161)
None None...
November 11, 2025—KB5068781 (OS Builds 19044.6575 and 19045.6575)
None None...
October 14, 2025—KB5066586 (OS Build 17763.7919)
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...
December 9, 2025—KB5071503 (Monthly Rollup)
None None...
December 9, 2025—KB5071542 (OS Build 25398.2025)
None None...