Base de datos CVE
Archivo de vulnerabilidades conocidas (CVE) con puntuación CVSS, gravedad, productos y fabricantes afectados. Filtra por año y severidad.
- CVE-2025-41244Alta7.8
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.
- CVE-2025-35027Alta7.3
Múltiples productos robóticos de Unitree que comparten un firmware común, incluidos los dispositivos Go2, G1, H1 y B2, contienen una vulnerabilidad de inyección de comandos. Al establecer una cadena maliciosa al configurar el WiFi integrado a través de un módulo BLE de un robot afectado, y luego provocar un reinicio del servicio WiFi, un atacante puede finalmente provocar la ejecución de comandos como root a través del script de shell wpa_supplicant_restart.sh. Todos los modelos de Unitree utilizan firmware derivado de la misma base de código (MIT Cheetah), y las dos bifurcaciones principales son las ramas G1 (humanoide) y Go2 (cuadrúpedo).
- CVE-2025-20362Media6.5
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software ["#fs"] section of this advisory. A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.
- CVE-2025-20333Crítica9.9
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.
- CVE-2025-20352Alta7.7
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. Note: This vulnerability affects all versions of SNMP.
- CVE-2025-10585Crítica9.8
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2025-26399Crítica9.8
SolarWinds Web Help Desk was found to be susceptible to an unauthenticated AjaxProxy deserialization remote code execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability is a patch bypass of CVE-2024-28988, which in turn is a patch bypass of CVE-2024-28986.
- CVE-2025-59689Media6.1
Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.
- CVE-2025-48703Crítica9.0
CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
- CVE-2025-10035Crítica10.0
Una vulnerabilidad de deserialización en el License Servlet de GoAnywhere MFT de Fortra permite a un actor con una firma de respuesta de licencia falsificada válidamente deserializar un objeto arbitrario controlado por el actor, lo que posiblemente conduce a la inyección de comandos.
- CVE-2025-9242Crítica9.8
Una vulnerabilidad de escritura fuera de los límites en el proceso iked de WatchGuard Fireware OS puede permitir que un atacante remoto no autenticado ejecute código arbitrario. Esta vulnerabilidad afecta tanto a la VPN de usuario móvil con IKEv2 como a la VPN de sucursal que utiliza IKEv2 cuando se configura con un peer de puerta de enlace dinámico. Si el Firebox se configuró previamente con la VPN de usuario móvil con IKEv2 o con una VPN de sucursal que utiliza IKEv2 hacia un peer de puerta de enlace dinámico, y ambas configuraciones se han eliminado desde entonces, ese Firebox puede seguir siendo vulnerable si todavía está configurada una VPN de sucursal hacia un peer de puerta de enlace estático.
- CVE-2025-21043Alta8.8
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
- CVE-2025-21042Alta8.8
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
- CVE-2025-54236Crítica9.1
Las versiones 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 y anteriores de Adobe Commerce están afectadas por una vulnerabilidad de Improper Input Validation. Un atacante exitoso puede abusar de esto para lograr un session takeover, aumentando a alto el impacto en la confidencialidad y la integridad. La explotación de este problema no requiere interacción del usuario.
- CVE-2025-39682Crítica9.8
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tls: corregir el manejo de registros de longitud cero en rx_list Cada llamada a recvmsg() debe procesar: - solo registros DATA contiguos (cualquier número de ellos) - un registro que no sea DATA Si el siguiente registro tiene un tipo diferente del que ya se ha procesado, salimos del bucle principal de procesamiento. Si el registro ya ha sido descifrado (lo que puede ocurrir con TLS 1.3, donde no conocemos el tipo hasta el descifrado), ponemos en cola el registro pendiente en rx_list. La siguiente llamada a recvmsg() lo recogerá de allí. No es posible poner en cola el skb en rx_list después del descifrado zero-copy, ya que en ese caso desciframos directamente en el búfer del espacio de usuario y no tenemos un skb que poner en cola (darg.skb apunta al skb de texto cifrado para acceder a metadatos como la longitud). Solo los registros de datos permiten zero-copy, y salimos del bucle de procesamiento después de cada registro que no sea de datos. Por lo tanto, nunca deberíamos usar zero-copy y descubrir después que el tipo de registro ha cambiado. El caso límite que omitimos se produce cuando el registro inicial proviene de rx_list y tiene longitud cero.
- CVE-2025-55241Crítica10.0
Vulnerabilidad de elevación de privilegios en Azure Entra ID
- CVE-2025-48543Alta8.8
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2025-53690Crítica9.0
Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
- CVE-2025-9377Alta7.2
The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9. This issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108. Both products have reached the status of EOL (end-of-life). It's recommending to purchase the new product to ensure better performance and security. If replacement is not an option in the short term, please use the second reference link to download and install the patch(es).
- CVE-2025-55177Media5.4
Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.
This product uses the NVD API but is not endorsed or certified by the NVD.