Explore CVE records

MedPublished 02 Aug 2025, 00:56 WIB

CVE-2025-6004

Vault Userpass and LDAP User Lockout Bypass

Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Excerpt language: en.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 02:11 WIB

Official record

MedPublished 02 Aug 2025, 00:52 WIB

CVE-2025-6037

Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|https://developer.hashicorp.com/vault/api-docs/auth/cert#certificate]. In this configuration, an attacker may be able to craft a malicious c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

MedPublished 02 Aug 2025, 00:50 WIB

CVE-2025-6014

Vault TOTP Secrets Engine Code Reuse

Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Excerpt language: en.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:05 WIB

Official record

HighPublished 02 Aug 2025, 00:46 WIB

CVE-2025-2824

IBM Operational Decision Manager HTTP open redirect

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redir…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:07 WIB

Official record

CritPublished 02 Aug 2025, 00:40 WIB

CVE-2025-6000

Arbitrary Remote Code Execution via Plugin Catalog Abuse

A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Excerpt language: en.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:12 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-5999

Vault Root Namespace Operator May Elevate Token Privileges

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fixed in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11 and 1.16.22.

Excerpt language: en.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:08 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8477

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluet…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.4v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:12 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8480

Alpine iLX-507 Command Injection Remote Code Execution

Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Tidal music streaming application…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8v3.0KEVNot listedEPSSPresentUpdated07 Aug 2025, 23:06 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8476

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the TIDAL music streaming…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.1v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:53 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8475

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malici…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.4v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 01:54 WIB

Official record

MedPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8474

Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability

Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.8v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 02:04 WIB

Official record

MedPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8473

Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability

Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPDM_wstpCBCUpdSta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.4v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 02:14 WIB

Official record

HighPublished 02 Aug 2025, 00:38 WIB

CVE-2025-8472

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. User interaction is required to exploit this vulnerability in that the target must connect to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS7.4v3.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 02:17 WIB

Official record

HighPublished 02 Aug 2025, 00:37 WIB

CVE-2023-32256

Kernel: ksmbd race issue from smb2 close and logoff with multichannel

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated30 Jun 2026, 03:26 WIB

Official record

MedPublished 02 Aug 2025, 00:21 WIB

CVE-2025-33118

IBM QRadar SIEM cross-site scripting

IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 12 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Excerpt language: en.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated02 Aug 2025, 00:34 WIB

Official record

MedPublished 01 Aug 2025, 23:32 WIB

CVE-2025-48074

OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance degradation when proce…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS4.6v4.0KEVNot listedEPSSPresentUpdated02 Aug 2025, 00:09 WIB

Official record

MedPublished 01 Aug 2025, 19:29 WIB

CVE-2025-41376

CRLF Injection in Limesurvey

CRLF Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via '/index.php/survey/index/sid/<SID>/token/fwyfw%0d%0aCookie:%20POC'.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 15:56 WIB

Official record

CritPublished 01 Aug 2025, 19:29 WIB

CVE-2025-41375

SQL Injection in Limesurvey

SQL Injection vulnerability in Limesurvey v2.65.1+170522. This vulnerability allows an attacker to retrieve, create, update and delete database via 'token' parameter in '/index.php' endpoint.

Excerpt language: en.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 15:51 WIB

Official record

HighPublished 01 Aug 2025, 19:29 WIB

CVE-2025-41374

SQL injection vulnerability in Gandia Integra Total

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The vulnerability allows an authenticated attacker to retrieve, create, update and delete databases through the 'idestudio' parameter in /encuestas/integraweb[_v4]/integra/html/view/hislistadoacciones.ph…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Aug 2025, 20:23 WIB

Official record

HighPublished 01 Aug 2025, 19:29 WIB

CVE-2025-41373

SQL injection vulnerability in Gandia Integra Total

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Aug 2025, 20:25 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage