2025

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileg

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authe

A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches co

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attack

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allo

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attack

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses

A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could allow an un

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow

A vulnerability in the access control list (ACL) processing of IPv4 packets of Cisco SD-WAN vEdge Software could allow a

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the f

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap co

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap co

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corr

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap co

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter.

Memory corruption while handling invalid inputs in application info setup.

Transient DOS while processing power control requests with invalid antenna or stream values.

Memory corruption while encoding the image data.

Transient DOS while handling command data during power control processing.

Transient DOS while parsing the EPTM test control message to get the test pattern.

Memory corruption due to global buffer overflow when a test command uses an invalid payload type.

Memory corruption due to double free when multiple threads race to set the timestamp store.

Memory corruption while handling repeated memory unmap requests from guest VM.

Memory corruption while processing data sent by FE driver.

Memory corruption while processing message in guest VM.

Memory corruption while processing config_dev IOCTL when camera kernel driver drops its reference to CPU buffers.

Information disclosure when Video engine escape input data is less than expected minimum size.

Memory corruption while selecting the PLMN from SOR failed list.

Information disclosure while running video usecase having rogue firmware.

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache

information disclosure while invoking calibration data from user space to update firmware size.

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is se

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is great

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments f

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs.

Cryptographic issue while performing RSA PKCS padding decoding.

Memory corruption while performing private key encryption in trusted application.

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake.

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant

When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module

Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE)

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data crea

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data crea