908 matches found
PT-2025-27321
Name of the Vulnerable Software and Affected Versions: Apache Seata incubating versions 2.0.0 through 2.3.0 Description: The issue is related to the deserialization of untrusted data. It is recommended that users upgrade to a fixed version to resolve the issue. Recommendations: For Apache Seata...
CVE-2025-52893
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...
SUSE CVE-2025-52893
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. This is separate from the earlier HCSEC-2025-09 / CVE-2025-4166. Th...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when processing malformed data. An attacker can access sensitive information by submitting specially crafted malformed input that causes error messages to include confidential data in...
CVE-2025-52893
OpenBao before v2.3.0 may leak sensitive information in logs when processing malformed data. Affected software: OpenBao (open-source data management for secrets, certificates, keys). Root cause: log disclosure vulnerability due to handling of malformed input. Impact: potential exposure of sensiti...
PT-2025-26866 · Openbao · Openbao
Name of the Vulnerable Software and Affected Versions: OpenBao versions prior to 2.3.0 Description: OpenBao is a software solution for managing, storing, and distributing sensitive data, including secrets, certificates, and keys. The issue allows an attacker to perform unauthenticated, unaudited...
OpenBao 日志信息泄露漏洞
OpenBao is OpenBao open source a sensitive data management software . Versions of OpenBao prior to 2.3.0 suffer from a log message disclosure vulnerability that is exploited by attackers to disclose sensitive information...
CVE-2025-50037
CVE-2025-50037 is a DOM-based Cross‑Site Scripting vulnerability in the WordPress plugin Buying Buddy IDX CRM (versions through 2.3.0). The issue arises from improper neutralization of input during web page generation, enabling arbitrary scripts to run in a victim’s browser. Impact per sources: p...
org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0 <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0 <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0 <=2.3.10)
org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.10 - org.apache.seatunnel:seatunnel-engine-k8s-e2e =2.3.10 Source cves: CVE-2025-32896 Source advisory: SNYK:JAVA-ORGAPACHESEATUNNEL-10442152...
org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0 <=2.3.10), org.apache.seatunnel:connector-seatunnel-e2e-base (>=2.3.0 <=2.3.10) +2 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-server (>=2.3.0 <=2.3.10)
org.apache.seatunnel:seatunnel-engine-server MAVEN version =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.10 - org.apache.seatunnel:seatunnel-engine-k8s-e2e =2.3.10 Source cves: CVE-2025-32896 Source advisory: OSV:GHSA-9X53-GR7P-4QF5...
org.apache.linkis:linkis-engineplugin-seatunnel (>=1.4.0 <=1.8.0), org.apache.seatunnel:connector-console-seatunnel-e2e (>=2.3.0 <=2.3.10) +6 more potentially affected by CVE-2025-32896 via org.apache.seatunnel:seatunnel-engine-common (>=2.3.0-beta <=2.3.10)
org.apache.seatunnel:seatunnel-engine-common MAVEN version =2.3.0-beta, =1.4.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.0, =2.3.10 Source cves: CVE-2025-32896 Source advisory: SNYK:JAVA-ORGAPACHESEATUNNEL-10442151...
ai.tripl:arc-kafka-pipeline-plugin_2.12 (>=1.3.0 <=1.15.1), cn.buli-home:MustardTools (>=0.0.1 <=0.2.8) +221 more potentially affected by CVE-2025-27818 via org.apache.kafka:kafka_2.12 (>=2.3.0 <=3.9.0)
org.apache.kafka:kafka2.12 MAVEN version =2.3.0, =1.3.0, =0.0.1, =0.3.0, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =6.0.1, =5.9.3, =5.5.7, =5.6.0, =0.4.1, =2.3, =2.3, =1.3.2, =1.4.5 and more Source cves: CVE-2025-27818 Source advisory: OSV:GHSA-76QP-H5MR-FRR4...
CVE-2025-27359
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File Type Manager: from n/a through = 2.3.2...
CVE-2025-27359
Cross-Site Request Forgery CSRF vulnerability in Seerox WP Media File Type Manager wp-media-file-type-manager allows Cross Site Request Forgery.This issue affects WP Media File Type Manager: from n/a through = 2.3.1...
CVE-2025-27359
CVE-2025-27359 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Media File Type Manager plugin for WordPress. The issue allows CSRF to be performed against plugin settings, with affected versions listed as up to 2.3.0 (vendor is referenced as WP Media File Type Manager). The ...
CVE-2024-30469
Missing Authorization vulnerability in WPExperts Wholesale For WooCommerce.This issue affects Wholesale For WooCommerce: from n/a through 2.3.0...
CVE-2023-6136
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bowo Debug Log Manager.This issue affects Debug Log Manager: from n/a through 2.3.0...
CVE-2023-37392
Cross-Site Request Forgery CSRF vulnerability in Deepak Anand WP Dummy Content Generator plugin = 2.3.0 versions...