23596 matches found
CVE-2025-5271
No description is available for this CVE...
CVE-2025-47295
creationtimestamp| type| source ---|---|--- 2025-05-28 08:19:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rdimvs2c2 2025-05-28 10:03:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7x74szie2m...
CVE-2025-24473
creationtimestamp| type| source ---|---|--- 2025-05-28 08:18:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7rd7j2xk42 2025-05-28 10:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7xzykyjn2r...
CVE-2025-46777
A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0 through 7.0.9 may allow an authenticated attacker with at least read-only admin permissions to view encrypted secrets via the FortiPortal System Log...
CVE-2025-22252
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin...
CVE-2025-48843
creationtimestamp| type| source ---|---|--- 2025-05-28 07:43:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7pemelfg2m...
CVE-2025-48842
creationtimestamp| type| source ---|---|--- 2025-05-28 07:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7ohb3uvz2j...
CVE-2025-4947
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...
CVE-2025-5025
libcurl supports pinning of the server certificate public key for HTTPS transfers. Due to an omission, this check is not performed when connecting with QUIC for HTTP/3, when the TLS backend is wolfSSL. Documentation says the option works with wolfSSL, failing to specify that it does not for QUIC...
CVE-2025-4800
creationtimestamp| type| source ---|---|--- 2025-05-28 06:42:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7lwt655z42 2025-05-28 09:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7trasiw52k...
CVE-2025-4947
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...
CVE-2025-4947
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...
CVE-2024-24270
creationtimestamp| type| source ---|---|--- 2025-05-28 04:53:52+00:00| seen| https://gist.github.com/kjw6855/3b2963415aeca4cba52266761465d879...
CVE-2025-25026
creationtimestamp| type| source ---|---|--- 2025-05-28 02:00:04+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746gw6fm52...
CVE-2025-25029
creationtimestamp| type| source ---|---|--- 2025-05-28 02:00:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq746fwypp62...
CVE-2025-27522
creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171 2025-05-28 04:08:51+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lq7dfe4y5w2e 2025-05-28 08:18:47+00:00| seen|...
CVE-2025-48928
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025...
CVE-2025-31500
Best Practical RT Request Tracker 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name...
CVE-2025-48931
The CVE-2025-48931 entry concerns TeleMessage service passwords hashed with MD5 (through 2025-05-05). Root cause: MD5-based password hashing enabling rainbow-table and related attacks with low computational effort. Impact is implied as password-cryptography weakness; no explicit exploited vector ...
