31309 matches found
CVE-2025-2296
CVE-2025-2296 affects EDK2 BIOS/edk2 components. The connected docs indicate a vulnerability in improper input validation that could allow arbitrary command execution and impact confidentiality, integrity, and availability, with local access required. Mitigations shown include patch/updated packa...
CVE-2025-40801
A vulnerability has been identified in COMOS V10.6 All versions V10.6.1, COMOS V10.6 All versions V10.6.1, JT Bi-Directional Translator for STEP All versions, NX V2412 All versions V2412.8900 with Cloud Entitlement bundled as NX X, NX V2506 All versions V2506.6000 with Cloud Entitlement bundled a...
CVE-2025-27020
Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . This issue affects MTC-9: from R22.1.1.0275 before R23.0...
CVE-2025-41693 Authenticated Denial-of-Service via SSH
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-41693 Authenticated Denial-of-Service via SSH
A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...
CVE-2025-41693
CVE-2025-41693 affects PHOENIX CONTACT FL SWITCH (industrial Ethernet switch). Technical details across sources indicate the SSH feature can be abused by a low-privileged remote attacker to execute commands after login. The vulnerability leads to a persistent process that consumes resources and d...
CVE-2025-41749 Reflected XSS vulnerability in port_util.php
An XSS vulnerability in portutil.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
CVE-2025-41751 Reflected XSS vulnerability in pxc_portCntr.php
An XSS vulnerability in pxcportCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...
November 11, 2025—KB5068779 (OS Build 25398.1965)
None None...
November 11, 2025—KB5068787 (OS Build 20348.4405)
None None...
October 14, 2025—KB5066837 (OS Build 10240.21161)
None None...
October 14, 2025—KB5066793 (OS Builds 22621.6060 and 22631.6060)
None None...
October 14, 2025—KB5066782 (OS Build 20348.4294)
None None...
November 11, 2025—KB5068904 (Monthly Rollup)
None None...
November 11, 2025—Hotpatch KB5068966 (OS Build 26100.7092)
None None...
November 11, 2025—KB5068907 (Monthly Rollup)
None None...
December 9, 2025—KB5071507 (Security-only update)
None None...
December 9, 2025—KB5071542 (OS Build 25398.2025)
None None...