Lucene search
+L

520 matches found

CVE
CVE
•added 2025/11/27 3:55 p.m.•199 views

CVE-2025-12419

Mattermost contains an OAuth/OpenID Connect validation flaw where OAuth state tokens are not properly validated during authentication, enabling an authenticated attacker with team-creation privileges to take over a user account by manipulating data in the OAuth completion flow. The issue affects ...

9.9CVSS7.7AI score0.00345EPSS
SaveExploits0References1Affected Software1
SUSE Linux
SUSE Linux
•added 2025/10/31 5:08 p.m.•24 views

Security update for squid

This update for squid fixes the following issues: CVE-2025-62168: Fixed proxy auth data visible to scripts bsc1252281. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...

8.6CVSS8.1AI score0.6336EPSS
SaveExploits1References4
NVD
NVD
•added 2025/10/31 4:15 p.m.•26 views

CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

8.4CVSS0.00201EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/31 3:49 p.m.•43 views

CVE-2025-12508

CVE-2025-12508 affects BRAIN2: when domain users act as BRAIN2 users, communication with Active Directory services is unencrypted, risking interception of authentication data and confidentiality. Documents consistently identify BRAIN2 as the affected software and describe the unencrypted AD traff...

8.4CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/31 3:49 p.m.•11 views

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

8.4CVSS5.8AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/31 3:49 p.m.•28 views

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

8.4CVSS0.00201EPSS
SaveExploits0References1
Debian
Debian
•added 2025/10/30 7:54 p.m.•21 views

[SECURITY] [DSA 6047-1] squid security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6047-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 30, 2025 https://www.debian.org/security/faq -...

10CVSS7.9AI score0.6336EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/10/30 12:00 a.m.•14 views

Debian dsa-6047 : squid - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6047 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6047-1 [email protected] https://www.debian.org/security/...

10CVSS8AI score0.6336EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/10/24 12:00 a.m.•18 views

IBM MQ Authentication Data Unencrypted

The vulnerability of the IBM MQ message management system lies in the storage of authentication data in unencrypted form within configuration files. Exploiting this vulnerability could allow an attacker to gain read access to these data...

5.1CVSS6.5AI score0.00104EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/10/23 12:00 a.m.•12 views

Mozilla Firefox Thunderbird Code Execution

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.8AI score0.0023EPSS
SaveExploits0References19Affected Software6
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•11 views

R9 platform Authentication Data Unencrypted DoS

The vulnerability of the R9 platform for building automation systems lies in the storage of authentication data in unencrypted configuration files. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the system...

7.8CVSS6.5AI score
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2015-2063

Malware in sbrugna...

7.8CVSS5.8AI score0.01517EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2001-0911

Malware in sbrugna...

7.5CVSS5.7AI score0.06053EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2002-0660

Malware in sbrugna...

5CVSS5.7AI score0.02474EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2015-2092

Malware in sbrugna...

7.8CVSS5.8AI score0.02129EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2012-0823

Malware in sbrugna...

4CVSS5.8AI score0.01118EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2017-6097

Malware in sbrugna...

9.8CVSS8.1AI score0.06878EPSS
SaveExploits3References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2012-3438

Malware in sbrugna...

5.8CVSS8.4AI score0.01874EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2021-27114

Malware in sbrugna...

6.8CVSS6.4AI score0.01134EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2008-1529

Malware in sbrugna...

4CVSS6.4AI score0.01064EPSS
SaveExploits0References5
Rows per page
Query Builder