Cisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2025-20328)
CVE number = CVE-2025-20328 A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated,
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
QNAP QHora-322 miro_webserver_lib_RunExecBash Command Injection Remote Code Execution Vulnerability (CVE-2024-13087)
– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers.
Read More
TeamViewer Link Following Denial-of-Service Vulnerability (CVE-2025-44002)
– This vulnerability allows local attackers to create a denial-of-service condition on affected installations of TeamViewer.
Read MoreCisco Nexus Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability (CVE-2025-20241)
CVE number = CVE-2025-20241 A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus
Read MoreCisco Integrated Management Controller Virtual Keyboard Video Monitor Open Redirect Vulnerability (CVE-2025-20317)
– A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website.
Read More
Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVE-2025-9330)
– This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader.
Read More
Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Axis Communications Autodesk Plugin.
Read More
Firebird SQL Database Server XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability (CVE-2025-54989)
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Firebird SQL.
Read MoreCisco Identity Services Engine Arbitrary File Upload Vulnerability (CVE-2025-20131)
– A vulnerability in the GUI of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device.
Read MoreContinued exploitation of Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability (CVE-2018-0171)
– Cisco is aware of continued exploitation activity of the vulnerability that is described in this advisory and strongly recommends that customers assess their systems and upgrade to a fixed software release as soon as possible.
Read More