22001 matches found
CVE-2025-23178
The CVE-2025-23178 entry corresponds to Ribbon Communications Apollo 9608 SBC with a vulnerability described as CWE-923: Improper Restriction of Communication Channel to Intended Endpoints. Connected sources indicate affected product as Apollo 9608 (appearing in CNNVD and PT-2025-18182); one note...
CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
CVE-2025-23178 Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
GHSA-CH37-53V3-M4CM
creationtimestamp| type| source ---|---|--- 2025-04-29 05:11:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13790...
Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities
Summary Multiple security vulnerabilities have been addressed in updates to IBM Security Verify Governance - Identity Manager software component and IBM Security Verify Governance - Identity Manager virtual appliance component. Vulnerability Details CVEID:CVE-2024-38809 DESCRIPTION: VMware Tanzu...
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities
Summary IBM Security Guardium has fixed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-39077 DESCRIPTION: IBM Security Guardium stores user credentials in plain clear text which can be read by a local privileged user. CVSS Base score: 4.4 CVSS Temporal Score: See:...
CVE-2025-23178: Improper Restriction of Communication Channel to Intended Endpoints
CWE-923: Improper Restriction of Communication Channel to Intended Endpoints...
Mutual Information Minimization for Side-Channel Attack Resistance Via Optimal Noise Injection
Side-channel attacks SCAs pose a serious threat to system security by extracting secret keys through physical leakages such as power consumption, timing variations, and electromagnetic emissions. Among existing countermeasures, artificial noise injection is recognized as one of the most effective...
CVE-2025-3301: Comparison Logic is Vulnerable to Power Side-Channel Attacks
DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and software support. A successful DPA attack may result in exposure of confidential information. The best practice is to u...
CVE-2025-31144
Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...
Stegano 1.0.0
Stegano is a basic Python Steganography module. Stegano implements two methods of hiding: using the red portion of a pixel to hide ASCII messages, and using the Least Significant Bit LSB technique. It is possible to use a more advanced LSB method based on integers sets. The sets Sieve of...
CVE-2025-31144: Improper Restriction of Communication Channel to Intended Endpoints
Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...
CVE-2025-27571
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived...
CVE-2025-2564
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled...
GHSA-MM4C-P35V-7HX3
creationtimestamp| type| source ---|---|--- 2025-04-25 22:07:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13550...
GHSA-7M6V-Q233-Q9J9
creationtimestamp| type| source ---|---|--- 2025-04-25 16:07:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13458...
CLSA-2025-1745588191 java-1.8.0-openjdk: Fix of 3 CVEs
Upgrade to shenandoah-jdk8u452-b09 fixing the following CVEs: - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling...
April 25, 2025-KB5056579 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2
None None...
PT-2025-29009
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a potential use-after-free issue within the dev loss tmo callbk function in the SCSI Low-Level Fibre Channel lpfc driver. Smatch, a static analysis tool,...