CVE Alert: CVE-2025-32820
Vulnerability Summary: CVE-2025-32820 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path...
CVE
CVE Alert: CVE-2025-32819
Vulnerability Summary: CVE-2025-32819 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path...
CVE Alert: CVE-2025-46824
Vulnerability Summary: CVE-2025-46824 The Discourse Code Review Plugin allows users to review GitHub commits on Discourse. Prior to commit eed3a80,...
CVE Alert: CVE-2025-20223
Vulnerability Summary: CVE-2025-20223 A vulnerability in Cisco Catalyst Center, formerly Cisco DNA Center, could allow an authenticated, remote attacker to...
CVE Alert: CVE-2025-26169
Vulnerability Summary: CVE-2025-26169 IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code...
CVE Alert: CVE-2025-47423
Vulnerability Summary: CVE-2025-47423 Personal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal...
CVE Alert: CVE-2025-3925
Vulnerability Summary: CVE-2025-3925 BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain...
CVE Alert: CVE-2025-47203
Vulnerability Summary: CVE-2025-47203 dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell...
CVE Alert: CVE-2025-26168
Vulnerability Summary: CVE-2025-26168 IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there...
CVE Alert: CVE-2025-36546
Vulnerability Summary: CVE-2025-36546 On an F5OS system, if the root user had previously configured the system to allow login via...
CVE Alert: CVE-2025-31644
Vulnerability Summary: CVE-2025-31644 When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP...
CVE Alert: CVE-2025-31177
Vulnerability Summary: CVE-2025-31177 gnuplot is affected by a heap buffer overflow at function utf8_copy_one. Affected Endpoints: No affected endpoints listed....
CVE Alert: CVE-2025-4043
Vulnerability Summary: CVE-2025-4043 An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is...
CVE Alert: CVE-2023-7303
Vulnerability Summary: CVE-2023-7303 A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This affects...
CVE Alert: CVE-2025-36504
Vulnerability Summary: CVE-2025-36504 When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an...
CVE Alert: CVE-2025-43878
Vulnerability Summary: CVE-2025-43878 When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be...
CVE Alert: CVE-2025-41433
Vulnerability Summary: CVE-2025-41433 When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured...
CVE Alert: CVE-2025-35995
Vulnerability Summary: CVE-2025-35995 When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an...
CVE Alert: CVE-2025-36525
Vulnerability Summary: CVE-2025-36525 When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause...
CVE Alert: CVE-2025-41399
Vulnerability Summary: CVE-2025-41399 When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can...
CVE Alert: CVE-2025-46821
Vulnerability Summary: CVE-2025-46821 Envoy is a cloud-native edge/middle/service proxy. Prior to versions 1.34.1, 1.33.3, 1.32.6, and 1.31.8, Envoy's URI template...
CVE Alert: CVE-2025-36557
Vulnerability Summary: CVE-2025-36557 When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed...
CVE Alert: CVE-2025-41431
Vulnerability Summary: CVE-2025-41431 When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel...
CVE Alert: CVE-2025-41414
Vulnerability Summary: CVE-2025-41414 When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM...
