Lucene search
+L

9832 matches found

NVD
NVD
•added 2025/03/20 10:15 a.m.•16 views

CVE-2024-10096

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
Cvelist
Cvelist
•added 2025/03/20 10:11 a.m.•49 views

CVE-2024-7804

...

SaveExploits1
CVE
CVE
•added 2025/03/20 10:11 a.m.•108 views

CVE-2024-7804

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

9.8AI score
SaveExploits1
Mend
Mend
•added 2025/03/20 10:08 a.m.•4 views

CVE-2025-0190

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of "Text" objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning thes...

8.7CVSS0.00626EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•16 views

PT-2025-12306

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.25.0 Description A denial of service issue exists, where tracking a large number of Text objects and then querying them simultaneously through the web API can cause the Aim web server to become unresponsive to other...

7.5CVSS5.9AI score0.00626EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•19 views

Aim 安全漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. A security vulnerability exists in Aim version 3.25.0 that originates when tracking a large number of Text objects and querying them simultaneously via the Web API, which can lead to server...

7.5CVSS7.3AI score0.00626EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•13 views

CVE-2025-0190: Excessive Data Query Operations in a Large Data Table

In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of Text objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these...

7.5CVSS7.2AI score0.00626EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/18 12:00 a.m.•11 views

PT-2025-18445

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been resolved in the Linux kernel, specifically in the drm/imagination module. The issue occurred when the module was unloaded, causing memory used to hold firmwa...

5.5CVSS6.6AI score0.00199EPSS
SaveExploits0
Snyk
Snyk
•added 2025/03/17 6:31 p.m.•5 views

Insecure Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Insecure Storage of Sensitive Information where vCenter credentials are stored in plaintext within the ClusterProvision object after provisioning a vSphere cluster. Users with read access to ClusterProvision objects can extract these...

8.6CVSS6.6AI score0.00497EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/03/14 2:57 a.m.•9 views

SUSE CVE-2025-25196

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.4 Helm chart openfga-0.2.22, docker v.1.8.4 are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users on OpenFGA...

9.8CVSS7AI score0.00434EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2025/03/13 12:00 a.m.•19 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.7AI score0.00353EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/03/13 12:00 a.m.•21 views

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.7AI score0.00353EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/03/13 12:00 a.m.•24 views

Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handli...

7.8CVSS6.7AI score0.0044EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/12 3:32 p.m.•20 views

GHSA-GFH6-3PQW-X2J4 SmallRye Fault Tolerance out-of-memory (OOM) issue

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue...

7.5CVSS7AI score0.01021EPSS
SaveExploits0References11
NVD
NVD
•added 2025/03/11 1:15 a.m.•22 views

CVE-2025-23185

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS0.00291EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/11 12:31 a.m.•87 views

CVE-2025-23185

Vulnerability summary: SAP Business Objects Business Intelligence Platform exposes internal technical details due to improper error handling. What is affected: SAP Business Objects BI Platform (information disclosure vulnerability). Root cause: Exceptions and stack traces reveal application inter...

4.1CVSS7.1AI score0.00291EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/11 12:31 a.m.•12 views

CVE-2025-23185 Information Disclosure in SAP Business Objects Business Intelligence Platform

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS7.1AI score0.00291EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/11 12:31 a.m.•37 views

CVE-2025-23185 Information Disclosure in SAP Business Objects Business Intelligence Platform

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS0.00291EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•19 views

SAP Business Objects Business Intelligence Platform 安全漏洞

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. An information disclosure vulnerability exists in SAP Business Objects Business Intelligence Platform, which stems from the application's inadequate...

4.1CVSS6.1AI score0.00291EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-23185: Generation of Error Message Containing Sensitive Information

Due to improper error handling in SAP Business Objects Business Intelligence Platform, technical details of the application are revealed in exceptions thrown to the user and in stack traces. Only an attacker with administrator level privileges has access to this disclosed information, and they...

4.1CVSS5.5AI score0.00291EPSS
SaveExploits0References1
Rows per page
Query Builder