23603 matches found
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise
CVE-2024-55210
An issue in TOTVS Framework Linha Protheus 12.1.2310 allows attackers to bypass multi-factor authentication MFA via a crafted websocket message...
CVE-2025-32375
creationtimestamp| type| source ---|---|--- 2025-04-08 23:54:46+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-7v4r-c989-xh26 2025-04-09 15:47:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11098 2025-04-09 15:56:12+00:0...
CVE-2025-25013
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack...
CVE-2025-25013
CVE-2025-25013 affects Elastic Defend; the issue is improper restriction of environment variables, causing exposure of sensitive data (e.g., API keys/tokens) via unfiltered env vars transmitted to the stack. Reported CVSSv3.1: 6.5 (Medium), with network attack vector, low attack complexity, low p...
CVE-2025-30288
creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftycli42f 2025-04-09 00:02:55+00:00| seen| https://t.me/cvedetector/22522 2025-04-18 17:59:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12506 2025-06-25...
CVE-2025-30282
creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftwjyg22z 2025-04-08 21:40:22+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtka3gk2y 2025-04-08 21:48:50+00:00| seen|...
CVE-2025-24446
creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftvwoas2z 2025-04-08 21:40:18+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtgtcw32c 2025-04-08 21:48:47+00:00| seen|...
CVE-2025-26682
A flaw was found in dotnet. Improper use of the HTTP/3 protocol allows an unauthorized remote attacker to cause an allocation of resources without limits or throttling in ASP.NET Core, resulting in a denial of service...
CVE-2025-27188
Adobe Commerce (Magento) is affected by CVE-2025-27188: an Improper Authorization vulnerability that could allow Privilege Escalation in versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier. Root cause is improper authorization; exploitation does not require user interaction...
CVE-2025-22871
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-22871 Request smuggling due to acceptance of invalid chunked data in net/http
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-27079
creationtimestamp| type| source ---|---|--- 2025-04-08 19:22:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd755mjjx2c...
CVE-2025-29824
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-29821
Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...
CVE-2025-29805
Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network...
CVE-2025-29791
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...