Unified CVE Intelligence,
Powered by AI

In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email parsing logic. An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device. A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system.

A critical path traversal vulnerability exists in the GitLab repository commits API. The flaw is caused by improper path confinement and a lack of authentication enforcement, which allows unauthenticated attackers to read arbitrary files from the affected server under certain conditions.

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.