2.2

CVSS3.1

CVE-2025-14840 - drupal: Drupal Http Client Manager: Information disclosure due to insufficient data separation

No description is available for this CVE.

πŸ“… Published: Dec. 17, 2025, 5:47 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 5:47 p.m.

10

CVSS3.1

CVE-2025-20393 - Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerab…

Cisco is aware of a potential vulnerability.  Cisco is currently investigating and will update these details as appropriate as more information becomes available.

πŸ“… Published: Dec. 17, 2025, 4:47 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 8:50 p.m.

6.5

CVSS4.0

CVE-2025-26381 - OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly F…

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

πŸ“… Published: Dec. 17, 2025, 4:13 p.m. πŸ”„ Last Modified: Dec. 18, 2025, 9:57 a.m.

8.7

CVSS4.0

CVE-2025-43873 - iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command…

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.

πŸ“… Published: Dec. 17, 2025, 3:53 p.m. πŸ”„ Last Modified: Dec. 18, 2025, 9:57 a.m.

8.7

CVSS4.0

CVE-2025-14727 - NGINX Ingress Controller vulnerability

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-targetΒ annotation validation. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

πŸ“… Published: Dec. 17, 2025, 3:48 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 9:18 p.m.

10

CVSS3.1

CVE-2025-44005 - github.com/smallstep/certificates: github.com/smallstep/certificates: Authorization bypass allows u…

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

πŸ“… Published: Dec. 17, 2025, 3:16 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 6 p.m.

0.6

CVSS4.0

CVE-2025-14266 - CSRF in Ercom Cryptobox administration console

CSRF in Ercom Cryptobox administration console allows attacker to trigger some actions on behalf of a Cryptobox administrator. The attack requires the administrator to browse a malicious web site or to click a link while he has an open session on the administration console.

πŸ“… Published: Dec. 17, 2025, 1:38 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 2:18 p.m.

0.0

CVE-2025-14828 -

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

πŸ“… Published: Dec. 17, 2025, 1:36 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 6:14 p.m.

7.1

CVSS4.0

CVE-2025-61736 - iSTAR- Improper Validation of Certificate Expiration

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.

πŸ“… Published: Dec. 17, 2025, 12:36 p.m. πŸ”„ Last Modified: Dec. 17, 2025, 9:18 p.m.

7.2

CVSS3.1

CVE-2025-14097 - Remote Code Execution Vulnerability in Radiometer Products

A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through other …

πŸ“… Published: Dec. 17, 2025, 12:36 p.m. πŸ”„ Last Modified: Dec. 18, 2025, 9:57 a.m.
Total resulsts: 323547
Page 69 of 32,355
Β« previous page Β» next page
Filters