SAP Financial Consolidation 安全漏洞

SAP Financial Consolidation is a financial statement solution from SAP, Germany. The product is designed to automate intercompany reconciliations and offsets, currency conversions, and provide financial statement generation. A security vulnerability exists in SAP Financial Consolidation, which...

PT-2025-15656 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier Description: The issue is related to an Improper Authentication vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverag...

Adobe ColdFusion 授权问题漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper authentication vulnerability that could be exploited by an...

PT-2025-15652 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 2025.0, 2023.12, 2021.18 and earlier Description: The issue is related to an Improper Authentication vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could...

CVE-2025-3268

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268 qinguoyi TinyWebServer http_conn.cpp improper authentication

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268 qinguoyi TinyWebServer http_conn.cpp improper authentication

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268

The CVE-2025-3268 entry concerns qinguoyi TinyWebServer (up to version 1.0). The issue is in the HTTP pathway (http/http_conn.cpp) where manipulation of the m_url_real argument leads to improper authentication, enabling a remote attack. Several connected sources (Red Hat, NVD, VulDB ecosystem, PT...

PT-2025-15044 · Qinguoyi · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A vulnerability has been found in qinguoyi TinyWebServer, classified as critical. This issue affects unknown code of the file http/http conn.cpp. The manipulation of the argument m url real lead...

TinyWebServer 授权问题漏洞

TinyWebServer is a C++ lightweight WebServer server for Linux by qinguoyi Personal Developer. An authorization issue vulnerability exists in TinyWebServer 1.0 and earlier versions, which stems from improper authentication...

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

CVE-2025-3085

Issue summary. MongoDB Server on Linux with TLS and CRL revocation check enabled may fail to validate revocation status of intermediate certificates in the peer’s certificate chain, potentially allowing improper authentication. This affects MongoDB Server versions: 5.0.x before 5.0.31, 6.0.x befo...

CVE-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

CVE-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

The vulnerability of the Microsoft Dataverse data management platform, related to incorrect authorization, allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft Dataverse data management platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to BCryptPasswordEncoder will incorrectly return true for passwords larger than 72 characters.

Summary Security Bulletin: IBM Maximo Application Suite Ai-Broker Component vulnerable to BCryptPasswordEncoder will incorrectly return true for passwords larger than 72 characters. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details...

CVE-2025-2859 Improper Authentication vulnerability in saTECH BCU

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...