13734 matches found
CVE-2025-32987
Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...
CVE-2025-32987
Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher...
PT-2025-16281 · Veritas +1 · Vault Enterprise +1
Name of the Vulnerable Software and Affected Versions: Arctera eDiscovery Platform versions prior to 10.3.2 Description: The issue concerns the Arctera eDiscovery Platform, where a cleartext password is placed on a command line in EVSearcher when the Enterprise Vault Collection Module is used...
BIT-PHP-MIN-2025-1736 Stream HTTP wrapper header check might omit basic auth header
In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted...
The vulnerabilities of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE allow attackers to execute arbitrary code.
The vulnerability of the FortiOS graphical interface, the FortiProxy proxy server for protecting against internet attacks, and the scalable cloud-based security system FortiSASE are related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote...
The vulnerability of the command-line interface (CLI) of the PAN-OS operating system, which allows a perpetrator to gain unauthorized access to protected information
The command-line interface CLI of the PAN-OS operating system has vulnerabilities due to the lack of measures to neutralize specific elements. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...
The vulnerability of the command-line interface (CLI) of Cisco IOS XR operating systems allows a hacker to elevate their privileges to the root level and execute arbitrary commands.
The vulnerability of the command-line interface CLI of Cisco IOS XR operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and execute arbitrary commands...
[SECURITY] Fedora 42 Update: cri-tools1.29-1.29.0-11.fc42
CLI and validation tools for Kubelet Container Runtime Interface CRI...
Rancher 信息泄露漏洞
Rancher is an open source container management platform open-sourced by Rancher in the United States, built for organizations that deploy containers in production environments. An information disclosure vulnerability exists in Rancher versions prior to 2.8.0 to 2.8.13, 2.9.0 to 2.9.7, and 2.10.0 ...
EulerOS 2.0 SP11 : vim (EulerOS-SA-2025-1380)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does no...
BIT-GOLANG-2025-22871 Request smuggling due to acceptance of invalid chunked data in net/http
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
The vulnerability of the gzip_do_write() function in the zlib compression library allows a attacker to bypass ASLR protection, execute arbitrary code, or cause a denial-of-service attack.
The vulnerability of the gzipdowrite function in the zlib compression library, a command-line utility of CURL, is related to integer overflow. Exploiting this vulnerability allows an attacker to bypass ASLR protection, execute arbitrary code, or cause a denial-of-service attack...
The vulnerability of ESET’s command-line scanner for anti-virus protection allows a hacker to execute arbitrary code.
The vulnerability of ESET’s command-line scanner for anti-virus protection is related to an uncontrolled element in the loading process of the version.dll library. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
The vulnerability of the command-line tool of the Zstandard data compression library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the command-line tool of the Zstandard data compression library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
GHSA-G9PC-8G42-G6VQ RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency
The net/http package dependency used by RoadRunner improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
AZL-59666 CVE-2025-22871 affecting package golang for versions less than 1.22.7-3
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-22871
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
AZL-59656 CVE-2025-22871 affecting package golang for versions less than 1.18.8-7
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...
CVE-2025-22871
The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a chunk-ext...