CVE-2025-24794 The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the...

CVE-2025-24794 The Snowflake Connector for Python uses insecure deserialization of the OCSP response cache

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the...

CVE-2025-24794

Technical details such as affected products, versions, root cause, impact and fixes for CVE-2025-24794 are not provided in the connected documents. Please monitor for updates from relevant advisories to obtain concrete vulnerability data and remediation guidance.

CVE-2023-37413

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy...

CVE-2023-37413

IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy...

CVE-2023-37413

IBM Aspera Faspex ≤ 5.0.10 is affected by an information-disclosure vulnerability (CVE-2023-37413) caused by an observable response discrepancy that could reveal sensitive username information. Affected product/versions: IBM Aspera Faspex 5.0.0 through 5.0.10. Remediation: upgrade to IBM Aspera F...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

...

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c

...

wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

...

CVE-2025-0795

A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

IBM Aspera Faspex 安全漏洞

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person document delivery and collaboration. An information disclosure vulnerability exists in IBM Aspera Faspex that stems from an observable response discrepancy that could be exploited by an attacker...

PT-2025-5575 · Snowflake · Snowflake Connector For Python

Name of the Vulnerable Software and Affected Versions: Snowflake Connector for Python versions 2.7.12 through 3.13.0 Description: The OCSP response cache in the Snowflake Connector for Python uses pickle as the serialization format, potentially leading to local privilege escalation. This issue ca...

CVE-2025-0790 ESAFENET CDG doneDetail.jsp cross site scripting

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-0790 ESAFENET CDG doneDetail.jsp cross site scripting

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-0790

The CVE-2025-0790 entry affects ESAFENET CDG V5, specifically the file /doneDetail.jsp. The vulnerability arises from unsanitized or manipulated the curpage parameter, enabling cross-site scripting. Exploitation is possible remotely, and public disclosures exist. Multiple sources (NVD, Red Hat, C...

CVE-2025-0788

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /contenttop.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2025-0788

CVE-2025-0788 affects ESAFENET CDG V5. The vulnerability is an SQL injection in the /content_top.jsp file, caused by manipulation of the id parameter. It can be exploited remotely, and public exploitation information exists. Multiple sources confirm the issue without clear vendor mitigation or re...

CVE-2025-0786

CVE-2025-0786 affects ESAFENET CDG V5. The vulnerability resides in the /appDetail.jsp function (parameter flowId) and leads to SQL injection. Exploitation is possible remotely, with public disclosure and no confirmed vendor remediation in the provided documents. Multiple sources corroborate the ...

U.S. Dept Of Defense: 2FA Bypass via Response Manipulation on Login Page

A vulnerability was discovered in the Two-Factor Authentication 2FA mechanism of the website. The vulnerability allowed bypassing the 2FA verification process by intercepting and manipulating the server's response. As a result, an attacker could gain unauthorized access to an account after...

CVE-2025-23054 Authenticated Response Manipulation allows Unauthorized Actions in Management Interface

A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an authenticated low privilege operator user to perform operations not allowed by their privilege level. Successful exploitation could allow an attacker to manipulate user generated files,...