Lista CVE 2025/25xxx

CVE nel gruppo: 25xxx

CVE-2025-25003 (N/A)

CVE-2025-25008 (Visual Studio Elevation of Privilege Vulnerability)

CVE-2025-25015 (Windows Server Elevation of Privilege Vulnerability)

CVE-2025-25035 (Kibana arbitrary code execution via prototype pollution)

CVE-2025-25036 (Jalios JPlatform 10 Multiple Cross-Site Scripting (XSS))

CVE-2025-25039 (Jalios JPlatform 10 Authenticated XML External Entity Injection (XXE))

CVE-2025-25040 (Authenticated Remote Command Injection in HPE Aruba Networking ClearPass Policy Manager Web-Based Management Interface)

CVE-2025-25042 (Failure to Properly Enforce Port ACLs on CPU generated packets in CX 9300 Switches)

CVE-2025-25054 (Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface)

CVE-2025-25055 (N/A)

CVE-2025-25062 (N/A)

CVE-2025-25063 (N/A)

CVE-2025-25064 (N/A)

CVE-2025-25065 (N/A)

CVE-2025-25066 (N/A)

CVE-2025-25067 (N/A)

CVE-2025-25068 (mySCADA myPRO Manager OS Command Injection)

CVE-2025-25069 (Bypassing MFA Enforcement on Plugin Endpoints)

CVE-2025-25070 (Apache Kvrocks: Cross-Protocol Scripting Vulnerability)

CVE-2025-25071 (WordPress Album Reviewer plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability)