CVE-2025-41426

CVE-2025-41426 affects Vertiv Liebert RDU101 and Vertiv Liebert UNITY network components. A stack-based buffer overflow in the affected firmware could allow an attacker to gain code execution on the device via network access (attackvector: NETWORK, attackcomplexity: LOW, privileges: NONE). The en...

CVE-2025-4997

A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function UpdateWanParams/AddMacList/EditMacList/AddWlanMacList/EditWlanMacList/EditBasicSSID/EditGuestSSIDFor2P4G/EditBasicSSID5G/SetAPInfoById of the file /goform/aspForm of the componen...

AutomationDirect MB-Gateway

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Danfoss AK-SM 8xxA Series (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could enable a remote attacker to bypass authentication and remotely execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

ABUP IoT Cloud Platform

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Adobe Bridge Access Uninitialized Pointer Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an Access Uninitialized Pointer vulnerability that originates from an integer overflow, which can be exploited by an attacker to execute arbitrary code...

The vulnerability of the Remote Desktop Gateway (RD Gateway) for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of Remote Desktop Gateway RD Gateway for Windows operating systems relates to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

PT-2025-22052 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-30475

Dell PowerScale InsightIQ, versions 5.0 through 5.2, contains an improper privilege management vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges...

Schneider Electric EcoStruxure Power Build Rapsody

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...

CVE-2025-4638

CVE-2025-4638 affects the inftrees.c component of the zlib library bundled with PointCloudLibrary (PCL). The issue can trigger undefined behavior via improper pointer arithmetic and is relevant when PCL is built with an older zlib (older than 1.14.0) or when the user disables the system zlib, cau...

PT-2025-21138 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is being actively exploited. No further details are available about the nature of the issue or its potential impact. Recommendations: At the moment, there is no information about a...

CVE-2025-30329 Animate | NULL Pointer Dereference (CWE-476)

Animate versions 24.0.8, 23.0.11 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption of service. Exploitation of this issue requires user...

Session Hijacking

github.com/zitadel/zitadel is vulnerable to Session Hijacking. The vulnerability is due to insufficient validation of reused IdP intents via repeated IdP intent exploitation, allowing attackers with access to the application's URI to retrieve authentication tokens and impersonate users...

PT-2025-20812

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...

Dell Storage Manager Elevation of Privilege Vulnerability

Dell Storage Manager is a centralized storage management platform from Dell USA. An elevation of privilege vulnerability exists in Dell Storage Manager, which can be exploited by an attacker to submit a special request for elevation of privilege...

Exploit for Missing Authorization in Oliverpos Oliver_Pos

Oliver POS – A WooCommerce Point of Sale POS = 2.4.2.3 - Se...

CVE-2025-47729

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL aka Archive Signal app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as...

CVE-2025-20181

CVE-2025-20181 affects Cisco IOS Software on Catalyst 2960X/2960XR/2960CX/3560CX switches. Root cause: missing signature verification for files loaded during boot, enabling an attacker with physical access or a privileged user to execute persistent code at boot and break the chain of trust. Affec...

CVE-2025-20191 Multiple Cisco Products Denial of Service Vulnerability

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...