Lucene search
+L

916 matches found

attackerkb
attackerkb
•added 2026/06/09 12:19 a.m.•16 views

CVE-2026-24315

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...

4.2CVSS5.6AI score0.00174EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/06/09 12:19 a.m.•41 views

EUVD-2026-35277

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...

4.2CVSS5.6AI score0.00174EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:00 a.m.•41 views

PT-2026-47528

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...

4.2CVSS5.6AI score0.00174EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•8 views

CVE-2026-24315: Path Traversal: '.../...//'

SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires adversaries to possess advanced knowledge of the system...

4.2CVSS5.8AI score0.00174EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/28 10:00 p.m.•15 views

Malicious Package

Overview @solana-launchpad/sdk is a malicious package. This package contains malicious code, and its content was not yet removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.8AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•24 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/09 6:31 p.m.•44 views

EUVD-2025-209375

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score0.00278EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/09 6:31 p.m.•34 views

EUVD-2025-209377

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS5.7AI score0.00307EPSS
SaveExploits0References3
PyPA
PyPA
•added 2026/04/09 4:16 p.m.•78 views

PYSEC-2026-135

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References2Affected Software1
osv_pysec
osv_pysec
•added 2026/04/09 4:16 p.m.•39 views

PYSEC-2026-135

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/09 4:16 p.m.•48 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS0.00278EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/04/09 4:16 p.m.•23 views

CVE-2025-15480

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

9.1CVSS5.7AI score0.00307EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/04/09 4:16 p.m.•17 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/04/09 4:16 p.m.•82 views

UBUNTU-CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

8.1CVSS5.6AI score0.00278EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/09 3:03 p.m.•96 views

CVE-2025-14551

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

5.6AI score0.00278EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/09 3:03 p.m.•12 views

CVE-2025-14551 Senstive information disclosure was affecting subiquity

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score0.00278EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/04/09 3:03 p.m.•27 views

CVE-2025-14551 Senstive information disclosure was affecting subiquity

In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...

6.9CVSS5.6AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/09 3:02 p.m.•12 views

CVE-2025-15480 Senstive information disclosure was affecting ubuntu-desktop-provision

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS5.7AI score0.00307EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/04/09 3:02 p.m.•23 views

CVE-2025-15480 Senstive information disclosure was affecting ubuntu-desktop-provision

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/09 3:02 p.m.•56 views

CVE-2025-15480 Senstive information disclosure was affecting ubuntu-desktop-provision

In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...

6.9CVSS0.00307EPSS
SaveExploits0References2
Rows per page
Query Builder