Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability (CVE-2025-13699)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB.

Read More
NewsSecurity Vulnerabilities

ASUS MyASUS Incorrect Permission Assignment Local Privilege Escalation Vulnerability (CVE-2025-59373)

– This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS.

Read More
NewsSecurity Vulnerabilities

Apple macOS WindowServer Excessive Iteration Denial-of-Service Vulnerability (CVE-2025-43401)

– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apple macOS.

Read More
NewsSecurity Vulnerabilities

Apple Safari JavaScriptCore Wasm Function Parsing Use-After-Free Remote Code Execution Vulnerability (CVE-2025-43432)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari.

Read More
NewsSecurity Vulnerabilities

NVIDIA AIStore AuthN users Missing Authentication for Critical Function Information Disclosure Vulnerability (CVE-2025-33185)

– This vulnerability allows remote attackers to disclose sensitive information on affected installations of NVIDIA AIStore.

Read More
NewsSecurity Vulnerabilities

NVIDIA AIStore AuthN Hard-coded Credentials Authentication Bypass Vulnerability (CVE-2025-33186)

– This vulnerability allows remote attackers to bypass authentication on affected installations of NVIDIA AIStore.

Read More
NewsSecurity Vulnerabilities

Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2.

Read More
NewsSecurity Vulnerabilities

Cisco Unified Contact Center Express Remote Code Execution Vulnerabilities (CVE-2025-20354 and CVE-2025-20358)

– Multiple vulnerabilities in the Java Remote Method Invocation (RMI) process of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to upload arbitrary files, bypass authentication, execute arbitrary commands, and elevate privileges to root.

Read More
NewsSecurity Vulnerabilities

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

– Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions.

Read More
NewsSecurity Vulnerabilities

Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability (CVE-2025-12486)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy.

Read More