CVE-2022-41263

Due to a missing authentication check, SAP Business Objects Business Intelligence Platform Web Intelligence - versions 420, 430, allows an authenticated non-administrator attacker to modify the data source information for a document that is otherwise restricted. On successful exploitation, the...

CVE-2022-3641

Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account...

CVE-2019-13348

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases...

CVE-2025-5052

creationtimestamp| type| source ---|---|--- 2025-05-22 01:35:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppxzrrcvj2m...

CVE-2009-0609

Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle 1 a long value in an ADD or 2 long string attributes, which allows remote attackers to cause a denial of service JDBC backend...

CVE-2024-49925

creationtimestamp| type| source ---|---|--- 2025-05-16 07:34:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16657 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2025-28074

creationtimestamp| type| source ---|---|--- 2025-05-08 21:15:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looteghxxqh2 2025-05-08 21:25:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15628 2025-05-08...

CVE-2025-45020

creationtimestamp| type| source ---|---|--- 2025-04-30 13:13:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14024 2025-04-30 15:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo25tbbs2z2o 2025-04-30 16:14:28+00:00| seen|...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2025-4070

creationtimestamp| type| source ---|---|--- 2025-04-29 16:12:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13851 2025-04-29 19:02:24+00:00| published-proof-of-concept| Telegram/obajfcGkagyaYelipu27ZjZPzm4H6vLGDNzjCH6Suk5ZZs 2025-04-29 19:20:29+00:00| seen|...

CVE-2022-44647

creationtimestamp| type| source ---|---|--- 2025-04-29 05:11:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13774...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2024-13688

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxieo5u2b 2025-04-28 09:52:50+00:00| seen| https://t.me/cvedetector/23887...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

PT-2025-18085 · Devexpress · Devexpress

Name of the Vulnerable Software and Affected Versions: DevExpress versions prior to 23.1.3 Description: The issue concerns a data-source protection mechanism bypass during the deserialization of XML data. This means that the normal protections in place to safeguard data sources can be circumvente...

CVE-2023-35815

DevExpress before 23.1.3 has a vulnerability where the data-source protection mechanism can be bypassed during XML deserialization. Affected product: DevExpress (pre-23.1.3). Root cause: bypass of data-source protection on XML data. Practical impact (as stated): potential unauthorized access or m...

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

CVE-2025-3980

creationtimestamp| type| source ---|---|--- 2025-04-27 18:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13628 2025-04-27 21:20:12+00:00| seen| https://t.me/cvedetector/23851 2025-04-27 21:40:21+00:00| seen|...

CVE-2025-3673

creationtimestamp| type| source ---|---|--- 2025-04-23 21:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fc3zvb24...