Lucene search
+L

155 matches found

CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•17 views

Circutor TCPRS1plus 安全漏洞

Circutor TCPRS1plus is a communication converter from Circutor Spain. A security vulnerability exists in Circutor TCPRS1plus that originates from the device web server exchanging sensitive information in clear text via an insecure protocol...

8.3CVSS6.5AI score0.00248EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•4 views

CVE-2025-64389: Cleartext Transmission of Sensitive Information

The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol...

8.3CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/31 12:00 a.m.•22 views

PT-2025-44634

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web server transmits sensitive information in clear text using an insecure protocol. Recommendations At the moment, there is no information about a newer...

8.3CVSS6.4AI score0.00248EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•21 views

ConnectWise Automate Agent 安全漏洞

ConnectWise Automate Agent is a remote monitoring and management software from ConnectWise USA. A security vulnerability exists in ConnectWise Automate Agent that stems from an improper configuration that allows the use of the HTTP protocol, which could lead to a man-in-the-middle attacker...

9.6CVSS8.2AI score0.00205EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/09 1:13 a.m.•15 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

8.6CVSS6.9AI score0.00118EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/08 12:49 a.m.•5 views

CVE-2025-48981

An insecure implementation of the proprietary protocol DNET in Product CGM MEDICO allows attackers within the intranet to eavesdrop and manipulate data on the protocol because encryption is optional for this connection...

5.8AI score0.00118EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-17834

Malware in sbrugna...

8.1CVSS7.5AI score0.0158EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-16648

Malware in sbrugna...

7.5CVSS7.3AI score0.03592EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-14016

Malware in sbrugna...

8.8CVSS7.8AI score0.00731EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-0203

Malware in sbrugna...

7.4CVSS7.5AI score0.00534EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-37776

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00534EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-47012

Malicious code in bioql PyPI...

6.5CVSS5.7AI score0.00171EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/17 7:58 p.m.•12 views

CVE-2025-59410 Dragonfly tiny file download uses hard coded HTTP protocol

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing th...

6.9CVSS6.7AI score
SaveExploits0References4
OSV
OSV
•added 2025/09/12 6:15 a.m.•27 views

DEBIAN-CVE-2025-9086

A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with only a slash as path path="/". Since this site is not...

7.5CVSS6.8AI score0.01395EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-3839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to...

8CVSS7.4AI score0.004EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 1:58 a.m.•15 views

CVE-2023-42579

Improper usage of insecure protocol i.e. HTTP in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middl...

6.5CVSS6.9AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:26 a.m.•19 views

CVE-2018-17774

Ingenico Telium 2 POS terminals have an insecure NTPT3 protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

7.2CVSS6.9AI score0.00583EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/23 2:47 a.m.•10 views

CVE-2024-42186 HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support

BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation...

2.8CVSS4AI score0.00078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/23 2:47 a.m.•35 views

CVE-2024-42186 HCL BigFix Patch Download Plug-ins are affected by an insecure protocol support

BigFix Patch Download Plug-ins are affected by an insecure protocol support. The application can allow improper handling of SSL certificates validation...

2.8CVSS0.00078EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/23 2:47 a.m.•62 views

CVE-2024-42186

CVE-2024-42186 affects HCL BigFix Patch Download Plug-ins due to insecure protocol support that can lead to improper handling of SSL certificate validation. According to available sources, the CVSSv3.1 vector is LOCAL, with HIGH attack complexity and LOW privileges required, yielding a LOW base s...

2.8CVSS4.1AI score0.00078EPSS
SaveExploits0References1
Rows per page
Query Builder