8388 matches found
D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23369)
The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from the misuse of the parameter macList in the file /goform/setwifiblacklists, which can be exploited by an attacker to cause remote command...
PT-2025-39888
Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 22.0.1049 Vasion Print Application versions prior to 20.0.2786 Description The Vasion Print Virtual Appliance Host and Application contain a default admin account and an installation-time endpoint at...
Vasion Print Virtual Appliance Host 安全漏洞
Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which originates from the /var/www/app/consolerelease/hp/badgeSetup.php script being accessible without...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-35027
Multiple robotic products by Unitree sharing a common firmware, including the Go2, G1, H1, and B2 devices, contain a command injection vulnerability. By setting a malicious string when configuring the on-board WiFi via a BLE module of an affected robot, then triggering a restart of the WiFi...
Unitree多款产品 安全漏洞
Unitree Go2 and others are products of Unitree, a Chinese company.Unitree Go2 is a robot dog.Unitree G1 is a humanoid robot.Unitree H1 is a humanoid robot. A security vulnerability exists in various Unitree products that stems from unverified input when configuring onboard WiFi via a BLE module,...
CVE-2025-20293
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...
CVE-2025-47329
Memory corruption while handling invalid inputs in application info setup...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494 Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494 Privilege Escalation
ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...
CVE-2025-5494
ZohoCorp ManageEngine Endpoint Central is affected by an improper privilege management flaw in the agent setup. The issue impacts Endpoint Central versions up to 11.4.2500.25 and up to 11.4.2508.13. Root cause: improper privilege handling during the agent installation process, enabling local priv...
PT-2025-39370
Name of the Vulnerable Software and Affected Versions ZohoCorp ManageEngine Endpoint Central versions through 11.4.2500.25 ZohoCorp ManageEngine Endpoint Central versions through 11.4.2508.13 Description An improper privilege management issue exists in the agent setup of ZohoCorp ManageEngine...
Cisco IOS XE Software for Catalyst 9800 Series Wireless Controller for Cloud Unauthenticated Access to Certificate Enrollment Service (cisco-sa-9800cl-openscep-SB4xtxzP)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the...
Linux Distros Unpatched Vulnerability : CVE-2023-53396
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in dorename If renaming a file in an encrypted directory, function...
CVE-2025-20293
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...
CVE-2025-20293
CVE-2025-20293 affects Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL). The root cause is incomplete cleanup at the end of the Day One setup, allowing an unauthenticated, remote attacker to reach the PKI server via SCEP requests. A successful exploit could ...
CVE-2025-20293
A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud 9800-CL could allow an unauthenticated, remote attacker to access the public-key infrastructure PKI server that is running on an affected device. This vulnerability is due...