18817 matches found
CVE-2025-2670: Exposure of Sensitive System Information to an Unauthorized Control Sphere
IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and...
PotentRegion4MalDetect: Advanced Features from Potential Malicious Regions for Malware Detection
Malware developers exploit the fact that most detection models focus on the entire binary to extract the feature rather than on the regions of potential maliciousness. Therefore, they reverse engineer a benign binary and inject malicious code into it. This obfuscation technique circumvents the...
CVE-2025-52357
Cross-Site Scripting XSS vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router firmware V2.2.14, allowing an authenticated attacker to execute arbitrary JavaScript code in the context of the router s web interface. The vulnerability is triggered via user-supplied...
CVE-2025-52357
The FiberHome FD602GW-DX-R410 fiber router (Firmware V2.2.14 , Build.1918.241111) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw in its ping diagnostic feature. The issue stems from a failure to sanitize special characters in the ping form field , allowing an authenticated attacker ...
CVE-2025-49536
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...
CVE-2025-49535
CVE-2025-49535 describes an XXE vulnerability in Adobe ColdFusion for versions 2025.2, 2023.14, 2021.20 and earlier. The issue is an improper restriction of XML External Entity references, which could allow an attacker to access sensitive information or cause denial of service. Exploitation requi...
CVE-2025-49535 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access sensitive information or denial of service b...
CVE-2025-49536
The CVE-2025-49536 issue affects Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier and is an Incorrect Authorization vulnerability that can bypass security features. A low-privileged attacker could bypass security checks and gain unauthorized access without user interaction, with exp...
CVE-2025-49536 ColdFusion | Incorrect Authorization (CWE-863)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of...
CVE-2025-49539
CVE-2025-49539 concerns Adobe ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier affected by an XML External Entity (XXE) vulnerability that can bypass security features and leak sensitive information. The issue is caused by improper restriction of XML external entities, enabling a high-pri...
CVE-2025-49539 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access sensitive information...
CVE-2025-49740
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-49740
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-48818
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-48001
Time-of-check time-of-use toctou race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-48003
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2024-36348
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...
CVE-2024-36348
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...
