1653 matches found
CVE-2025-63891
The vulnerability CVE-2025-63891 affects SourceCodester’s Simple Online Book Store System. A remote, unauthenticated attacker can disclose the full database contents (including schema and credential hashes) by accessing a web‑accessible backup file via an unauthenticated HTTP GET to /obs/database...
The vulnerability of the Dell PowerScale OneFS operating system, related to the use of cryptographic algorithms containing defects, allows a perpetrator to disclose protected information.
The vulnerability of the Dell PowerScale OneFS operating system lies in the use of cryptographic algorithms that contain defects. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...
ROS-20251111-03
Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...
ROS-20251111-04
Vulnerability of mlx5 driver Poll Mode Driver of DPDK package is related to incorrect data processing when working with Mellanox network devices. with Mellanox network devices. Exploitation of the vulnerability could allow an attacker, remotely to cause information disclosure or denial of service...
ROS-20251105-06
The vulnerability of Microsoft .NET Framework, .NET software platforms, and Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Microsoft Visual Studio software development tool is related to insufficiently strong data encryption. Exploitation...
squid-cache: Squid vulnerable to information disclosure via authentication credential leakage in error handling
A Information Disclosure vulnerability has been identified in the Squid web caching proxy. This flaw occurs when the application fails to properly redact sensitive Hypertext Transfer Protocol HTTP authentication credentials from an error response. A remote client can exploit this by triggering an...
CVE-2025-43994
Dell Storage Center - Dell Storage Manager, versions DSM 20.1.21, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
PT-2025-43622
Name of the Vulnerable Software and Affected Versions Dell Storage Manager versions 20.1.21 Description Dell Storage Manager version 20.1.21 contains a missing authentication mechanism for a critical function. A remote attacker who does not have valid credentials could potentially exploit this...
The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the disclosure of information, allowing a perpetrator to access protected data.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the disclosure of information. Exploiting these vulnerabilities can allow a malicious actor to disclose the protected information remotely...
PT-2025-43479
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of Microsoft’s software platforms such as the .NET Framework and .NET, as well as Microsoft Visual Studio, relates to insufficiently secure data encryption. This allows attackers to disclose sensitive information that should be protected.
The vulnerability of Microsoft’s software platforms, such as the .NET Framework, .NET, and Microsoft Visual Studio, is related to insufficient data encryption. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
ROS-20251020-02
Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...
CVE-2025-55700
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
EUVD-2025-34292
Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network...
The vulnerability of the l2cap_connect() function in the net/bluetooth/l2cap_core.c module of the Linux kernel allows a hacker to disclose protected information.
The vulnerability of the l2capconnect function in the net/bluetooth/l2capcore.c module of the Linux kernel is related to insufficiently secure data encryption. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this function...
Linux Distros Unpatched Vulnerability : CVE-2025-54290
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without...
CVE-2025-43891
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an use of a Broken or Ris...
EUVD-2025-32899
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an use of a Broken or Ris...