Lucene search
K

327 matches found

Vulnrichment
Vulnrichment
added 2025/12/04 9:51 a.m.4 views

CVE-2025-14010 Ansible-collection-community-general: ansible-collection-community-general: keycloak user module leaks credentials in verbose output

A flaw was found in ansible-collection-community-general. This vulnerability allows for information exposure IE of sensitive credentials, specifically plaintext passwords, via verbose output when running Ansible with debug modes. Attackers with access to logs could retrieve these secrets and...

5.5CVSS6AI score0.00115EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/11/18 5:1 p.m.6 views

CVE-2025-46775

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log...

5.5CVSS0.00137EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 5:1 p.m.4 views

EUVD-2025-198015

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log...

5.5CVSS6AI score0.00137EPSS
Exploits0References2
CVE
CVE
added 2025/11/18 5:1 p.m.8 views

CVE-2025-46775

Fortinet FortiExtender contains a vulnerability where debug messages disclose unnecessary information, potentially allowing an authenticated user to obtain administrator credentials. Affected versions include 7.0 all versions, 7.2 all versions, 7.4.0–7.4.6, and 7.6.0–7.6.1. The root cause is expo...

5.5CVSS6.1AI score0.00137EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-12910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug...

6.2CVSS5.4AI score0.00095EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/11/12 10:1 a.m.3 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome allowed a local attacker to obtain potentially sensitive information via debug logs...

6.2CVSS5.8AI score0.00095EPSS
Exploits1References2
CNVD
CNVD
added 2025/11/12 12:0 a.m.3 views

Google Chrome Passkeys Improperly Implemented Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a Passkeys mal-implementation vulnerability, which can be exploited by an attacker to obtain sensitive information via debug logs...

6.2CVSS6.5AI score0.00095EPSS
Exploits1References1
OSV
OSV
added 2025/11/08 12:15 a.m.3 views

DEBIAN-CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

6.2CVSS6.1AI score0.00095EPSS
Exploits1References1
OSV
OSV
added 2025/11/08 12:15 a.m.2 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

6.2CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/11/08 12:15 a.m.6 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

6.2CVSS0.00095EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a Passkeys mal-implementation vulnerability, which can be exploited by an attacker to obtain sensitive information via debug logs...

6.2CVSS6AI score0.00095EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2025/11/07 11:23 p.m.9 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

6.2CVSS6.1AI score0.00095EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/11/07 11:23 p.m.3 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

5.6AI score0.00095EPSS
Exploits1References2
EUVD
EUVD
added 2025/11/07 11:23 p.m.3 views

EUVD-2025-38335

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

5.5AI score0.00095EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/11/07 11:23 p.m.5 views

CVE-2025-12910

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. Chromium security severity: Low...

0.00095EPSS
Exploits1References2
CVE
CVE
added 2025/11/07 11:23 p.m.13 views

CVE-2025-12910

CVE-2025-12910 describes an improper Passkeys implementation in Google Chrome/Chromium that allows a local attacker to obtain potentially sensitive information via debug logs. The vulnerability is tied to Chrome/Chromium’s Passkeys handling and is classified with a low severity in Chromium’s metr...

6.2CVSS5.6AI score0.00095EPSS
Exploits1References2Affected Software1
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.3 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation of Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information through debug logs. Chromium security severity: Low...

6.2CVSS5.4AI score0.00095EPSS
Exploits1References3
AstraLinux
AstraLinux
added 2025/10/31 4:38 p.m.1 views

Astra Linux - уязвимость в network-manager

A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service...

3.1CVSS3.9AI score0.00425EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/10 1:32 a.m.22 views

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

3.5CVSS6.6AI score0.00177EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-28449

Malware in sbrugna...

4.7CVSS5AI score0.00246EPSS
Exploits0References2
Rows per page
Query Builder