Aggregator

A vulnerability, which was classified as problematic, was found in Cisco ASA and Firepower Threat Defense. This affects an unknown part of the component IKEv2 Handler. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-20252. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Cisco ASA and Firepower Threat Defense Software. Affected by this issue is some unknown functionality of the component SSL VPN Service. The manipulation leads to improper validation of specified type of input. This vulnerability is handled as CVE-2025-20244. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Cisco ASA and Firepower Threat Defense Software. Affected by this vulnerability is an unknown functionality. The manipulation leads to infinite loop. This vulnerability is known as CVE-2025-20243. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cisco ASA and Firepower Threat Defense. Affected is an unknown function of the component IKEv2 Handler. The manipulation leads to memory leak. This vulnerability is traded as CVE-2025-20224. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Firepower Threat Defense. It has been rated as critical. This issue affects some unknown processing of the component IPsec VPN. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2025-20222. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco ASA and Firepower Threat Defense. It has been declared as problematic. This vulnerability affects unknown code of the component NAT DNS Inspection. The manipulation leads to infinite loop. This vulnerability was named CVE-2025-20136. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco ASA and Firepower Threat Defense. It has been classified as critical. This affects an unknown part. The manipulation leads to double free. This vulnerability is uniquely identified as CVE-2025-20134. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco ASA and Firepower Threat Defense and classified as critical. Affected by this issue is some unknown functionality of the component SSL VPN. The manipulation leads to memory leak. This vulnerability is handled as CVE-2025-20133. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Cisco ASA and Firepower Threat Defense and classified as critical. Affected by this vulnerability is an unknown functionality of the component Loopback Interface Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2025-20219. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Cisco ASA and Firepower Threat Defense. Affected is an unknown function. The manipulation leads to denial of service. This vulnerability is traded as CVE-2025-20127. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Cisco Firepower Management Center. This issue affects some unknown processing of the component HTTP Handler. The manipulation leads to command injection. The identification of this vulnerability is CVE-2025-20306. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Cisco ASA and Firepower Threat Defense. This vulnerability affects unknown code of the component SSL VPN Service. The manipulation leads to improper validation of specified type of input. This vulnerability was named CVE-2025-20251. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cisco IOS, ASA, IOS XE and Firepower Threat Defense. This affects an unknown part of the component IKEv2 Handler. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-20239. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component IKEv2 Feature. The manipulation leads to infinite loop. This vulnerability is known as CVE-2025-20253. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco IOS, ASA, IOS XE and Firepower Threat Defense. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IKEv2 Handler. The manipulation leads to memory leak. This vulnerability is handled as CVE-2025-20225. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Norway’s security service PST says pro-Russian hackers took over a dam in April, opening outflow valves. Norway’s Police Security Service (PST) says pro-Russian hackers seized control of a dam’s systems in April, opening outflow valves. On April 7, the attackers took control of a dam in Bremanger, western Norway, opening a flood gate to release […]

Dark Reading's Terry Sweeney and Google's Loren Hudziak discuss how the humble web browser has transformed from a simple web access tool into a common conduit through which a lot of business is done.

Обновление остановит сбор уникальных ID через популярные веб-API.

Beware of fake Netflix job offers! A new phishing campaign is targeting job seekers, using fraudulent interviews to…

Google has achieved a significant milestone in mobile security with the announcement that Android’s protected KVM (pKVM) hypervisor has officially received SESIP Level 5 certification, marking it as the first software security system designed for large-scale consumer electronics deployment to reach this prestigious assurance level. This groundbreaking achievement positions Android at the forefront of secure […]

The post Google Announces That Android’s pKVM Framework Achieves SESIP Level 5 Certification appeared first on Cyber Security News.