41704 matches found
GHSA-4FWJ-8595-WP25 Mattermost has Insufficiently Protected Credentials
Mattermost versions 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to send synchronization payloads to the server that originally created the invite via the REST API...
Vulnerable to Bulletproof: Protect TLS via Certificate Posture Management
...
TOTOLINK N300RB Command Injection Vulnerability
The TOTOLINK N300R is a wireless router for home and small office scenarios from Korean networking brand TOTOLINK. The TOTOLINK N300RB suffers from a command injection vulnerability that originates from the remote support feature of static key protection, which can be exploited by an attacker to...
Ubuntu: Security Advisory (USN-7591-6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical Photon OS Security Update - PHSA-2025-5.0-0562
Updates of 'libxml2' packages of Photon OS have been released...
Ubuntu: Security Advisory (USN-7651-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-4657
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2025-4657
CVE-2025-4657 describes a buffer overflow in the Lenovo Protection Driver (versions before 5.1.1110.4231) used by Lenovo PC Manager, Lenovo Browser, and Lenovo App Store. The flaw could allow a local attacker with elevated privileges to execute arbitrary code. Documented impact includes local cod...
CVE-2025-4657
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2025-4657
A buffer overflow vulnerability was reported in the Lenovo Protection Driver, prior to version 5.1.1110.4231, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store could allow a local attacker with elevated privileges to execute arbitrary code...
RHSA-2025:11339 Red Hat Security Advisory: cloud-init security update
Bulletin has no description...
RHSA-2025:11327 Red Hat Security Advisory: glib2 security update
Bulletin has no description...
CVE-2025-4302
The CVE-2025-4302 issue affects the Stop User Enumeration WordPress plugin prior to version 1.7.3, where an authentication bypass is possible by URL-encoding the REST API path /wp-json/wp/v2/users/. This bypass defeats the plugin’s user-enumeration protections, and may facilitate brute-force atte...
CVE-2025-4302 Stop User Enumeration < 1.7.3 - Protection Bypass
The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path...
The vulnerability of the Golang programming language, related to insufficient protection of sensitive data, allows attackers to gain access to potentially confidential information.
The vulnerability of the Golang programming language is related to the insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to potentially confidential information...
PT-2025-29959 · Lenovo · Lenovo Browser +3
Name of the Vulnerable Software and Affected Versions: Lenovo Protection Driver versions prior to 5.1.1110.4231 Description: A buffer overflow issue exists in the Lenovo Protection Driver, used in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store. A local attacker with elevated privileges c...
DSA-5963-1 chromium - security update
Bulletin has no description...
IDFace: Face Template Protection for Efficient and Secure Identification
As face recognition systems FRS become more widely used, user privacy becomes more important. A key privacy issue in FRS is protecting the user's face template, as the characteristics of the user's face image can be recovered from the template. Although recent advances in cryptographic tools such...
Lenovo Protection Driver 安全漏洞
Lenovo Protection Driver is a hard disk protection system from Lenovo China. A security vulnerability exists in Lenovo Protection Driver prior to version 5.1.1110.4231, which stems from a buffer overflow vulnerability that could lead to the execution of arbitrary code by a local privileged user...
