Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-10203)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent WaveForms.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Palo Alto User-ID Credential Agent: Cleartext Exposure of Service Account password (CVE-2025-4235)
– An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurations.
Read More
Microsoft .NET IsTypeAuthorized Deserialization of Untrusted Data Denial-of-Service Vulnerability
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft .NET.
Read MoreSiemens Simcenter Femap STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-40762)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap.
Read More
Cisco IOS XR Software Image Verification Bypass Vulnerability (CVE-2025-20248)
CVE number = CVE-2025-20248 A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local
Read MoreCisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (CVE-2025-20326)
– A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device.
Read More
Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability (CVE-2025-8300)
– This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver.
Read More
QEMU uefi-vars Uninitialized Memory Information Disclosure Vulnerability (CVE-2025-8860)
– This vulnerability allows local attackers to disclose sensitive information on affected installations of QEMU.
Read MoreCisco Webex Meetings URL Redirection Vulnerability (CVE-2025-20291)
– A vulnerability in Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to redirect a targeted Webex Meetings user to an untrusted website. Cisco has addressed this vulnerability in the Cisco Webex Meetings service, and no customer action is needed.
Read MoreCisco Webex Meetings Cross-Site Scripting Vulnerability (CVE-2025-20328)
CVE number = CVE-2025-20328 A vulnerability in the user profile component of Cisco Webex Meetings could have allowed an authenticated,
Read More