Lucene search
+L

24826 matches found

Cvelist
Cvelist
•added 2025/04/23 10:23 p.m.•42 views

CVE-2025-25045 IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further attacks against the system...

4.3CVSS0.00305EPSS
SaveExploits0References1
Circl
Circl
•added 2025/04/23 8:04 p.m.•14 views

RHSA-2019:2399

creationtimestamp| type| source ---|---|--- 2025-04-23 20:04:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13135 2025-04-23 20:04:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13136 2025-04-23 20:04:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13137...

4.8AI score
SaveExploits0References3
Circl
Circl
•added 2025/04/23 8:04 p.m.•16 views

RHSA-2019:0679

creationtimestamp| type| source ---|---|--- 2025-04-23 20:04:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13135 2025-04-23 20:04:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13136 2025-04-23 20:04:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13137...

4.8AI score
SaveExploits0References3
CVE
CVE
•added 2025/04/23 10:43 a.m.•74 views

CVE-2025-42604

CVE-2025-42604 affects Meon KYC solutions. The root cause is that debug mode is enabled in certain API endpoints, which an attacker could access to receive unauthorized API responses that disclose detailed system information. The available documents describe the vulnerability as an information di...

6.9CVSS5.9AI score0.00489EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/23 10:43 a.m.•40 views

CVE-2025-42604 Detailed Error Response Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...

6.9CVSS0.00489EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/23 10:43 a.m.•11 views

CVE-2025-42604 Detailed Error Response Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to debug mode is enabled in certain API endpoints. A remote attacker could exploit this vulnerability by accessing certain unauthorized API endpoints leading to detailed error messages as response leading to disclosure of system related...

6.9CVSS5.9AI score0.00489EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/23 12:00 a.m.•15 views

PT-2025-17674 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue allows an authenticated user to obtain sensitive information when a detailed technical error message is returned in a request. This information could be used in further...

4.3CVSS5.3AI score0.00305EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2025/04/23 12:00 a.m.•24 views

Azure Linux 3.0 Security Update: qemu (CVE-2023-6683)

The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6683 advisory. - A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The...

6.5CVSS6.6AI score0.01261EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
•added 2025/04/22 12:08 p.m.•9 views

Security update for orc

This update for orc fixes the following issues: CVE-2024-40897: Fixed stack-based buffer overflow inside the orc compiler when formatting error messages for certain input files bsc1228184. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

7CVSS7.2AI score0.00382EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2025/04/22 12:08 p.m.•13 views

SUSE-SU-2025:20272-1 Security update for orc

This update for orc fixes the following issues: - CVE-2024-40897: Fixed stack-based buffer overflow inside the orc compiler when formatting error messages for certain input files bsc1228184...

7CVSS7.2AI score0.00382EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2025/04/21 1:15 a.m.•15 views

DEBIAN-CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

9.8CVSS6.1AI score0.00573EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/21 12:00 a.m.•18 views

CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

6.8CVSS6.1AI score0.00573EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/21 12:00 a.m.•41 views

CVE-2025-43973

An issue was discovered in GoBGP before 3.35.0. pkg/packet/rtr/rtr.go does not verify that the input length corresponds to a situation in which all bytes are available for an RTR message...

6.8CVSS6.1AI score0.00573EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/04/18 7:15 a.m.•17 views

UBUNTU-CVE-2025-38240

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drmerr = deverr in HPD path to avoid NULL ptr The function mtkdpwaithpdasserted may be called before the mtkdp-drmdev pointer is assigned in mtkdpbridgeattach. Specifically it can be called via this callpath: -...

5.5CVSS5.9AI score0.00263EPSS
SaveExploits0References25
Circl
Circl
•added 2025/04/17 6:57 p.m.•21 views

CVE-2020-14480

creationtimestamp| type| source ---|---|--- 2025-04-17 18:57:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12316...

5.5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/17 5:59 p.m.•25 views

CVE-2025-3618

A denial-of-service vulnerability exists in the Rockwell Automation ThinManager. The software fails to adequately verify the outcome of memory allocation while processing Type 18 messages. If exploited, a threat actor could cause a denial-of-service on the target software...

8.5CVSS7.3AI score0.01784EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2025/04/17 12:00 a.m.•29 views

GNUnet P2P Framework 0.24.1

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/04/17 12:00 a.m.•27 views

RabbitMQ 3.11.x < 3.11.24 / 3.12.x < 3.12.7 Denial of Service

The version of RabbitMQ installed on the remote host is 3.11.x prior to 3.11.24, or 3.12.x prior to 3.12.7. It is, therefore, affected by a denial of service vulnerability: - RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP request body limit, making i...

4.9CVSS6.1AI score0.01318EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/16 9:38 p.m.•73 views

CVE-2025-32783 XWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vulnerability is that any message sent i...

4.7CVSS0.00324EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/04/16 9:38 p.m.•17 views

CVE-2025-32783 XWiki allows unregistered users to see "public" messages from a closed wiki via notifications from a different wiki

XWiki Platform is a generic wiki platform. A vulnerability in versions from 5.0 to 16.7.1 affects users with Message Stream enabled and a wiki configured as closed from selecting "Prevent unregistered users to view pages" in the Administrations Rights. The vulnerability is that any message sent i...

4.7CVSS5.2AI score0.00324EPSS
SaveExploits1References2
Rows per page
Query Builder