JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a credential disclosure vulnerability that...

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

WordPress WP Import plugin unauthorized access vulnerability

WordPress WP Import plugin is a plugin for batch importing and exporting WordPress data, supports multiple file formats such as CSV, XML, JSON, etc., and can handle posts, pages, comments, users and other data. WordPress WP Import plugin has an unauthorized access vulnerability that stems from a...

Unspecified Vulnerability in Dell PowerProtect Data Manager (CNVD-2025-22167)

Dell PowerProtect Data Manager PPDM is a set of data protection solutions from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. A security vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which can be...

IBM WebSphere Application Server Liberty 17.0.0.3 < 25.0.0.8 Stored Cross-Site Scripting (7242026)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a stored cross-site scripting vulnerability as referenced in the 7242026 advisory: - IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting...

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

CVE-2025-43938

CVE-2025-43938 affects Dell PowerProtect Data Manager (PPDM) running on Hyper-V for versions 19.19 and 19.20 . The issue is described as plaintext storage of a password , enabling a high-privilege, local attacker to disclose credentials and potentially gain unauthorized access with the compromise...

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

CVE-2025-43938

Dell PowerProtect Data Manager, versions 19.19 and 19.20, Hyper-V contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to...

Dell PowerProtect Data Manager 安全漏洞

Dell PowerProtect Data Manager PPDM is a set of data protection solutions from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. A security vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which can be...

AxxonSoft AxxonOne和AxxonSoft AxxonNet 安全漏洞

AxxonSoft AxxonOne and AxxonSoft AxxonNet are both products of AxxonSoft Ireland.AxxonSoft AxxonOne is a video surveillance and security management software.AxxonSoft AxxonNet is a cloud-based video surveillance and management platform. A security vulnerability exists in AxxonSoft AxxonOne and...

CVE-2025-36125

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

CVE-2025-36125 IBM Hardware Management Console - Power Systems cross-site scripting

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...

SAP Business One 安全漏洞

SAP Business One is a suite of business management software from the German company SAP. The software includes functionality for financial management, operations management, and human resource management. A security vulnerability exists in SAP Business One, which stems from insufficient encryptio...

IBM Hardware Management Console - Power 跨站脚本漏洞

IBM Hardware Management Console - Power is a hardware appliance from International Business Machines IBM used to configure and control IBM Power Systems servers. A cross-site scripting vulnerability exists in IBM Hardware Management Console - Power versions 10.3.1050.0 and 11.1.1110.0, which...

CVE-2025-41682

CVE-2025-41682 affects Bender GmbH & Co. KG charge controllers (e.g., CC612, CC613, ICC15xx). An authenticated, low-privileged attacker can access credentials stored on the device, including the manufacturer password, via insecure storage. Documents indicate this is a credential-disclosure vulner...

CVE-2025-41682 Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

CVE-2025-41682 Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password...

CVE-2024-43184

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...

CVE-2025-26437

In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...