29647 matches found
CVE-2025-53947
A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content...
CVE-2025-50709
An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...
CVE-2025-53947
CVE-2025-53947 affects Cognex In-Sight Explorer and Cognex In-Sight Camera Firmware. The root cause is incorrect default/weak permissions on a data folder, enabling a local attacker with low privileges to modify its content and corrupt sensitive data. The vulnerability is local and requires minim...
CVE-2023-49367
An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user...
CVE-2024-13149
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection', CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arma Store Armalife allows SQL Injection.This issue affects Armalife: through 20250916. NOTE: The vendor did not inform about...
CVE-2025-7743
Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation. This issue affects Omaspot: before 12.09.2025...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2025-5519
Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6...
Apple macOS Tahoe Sandboxing Insufficient Restrictions Vulnerability
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Apple macOS Tahoe sandbox under-limit vulnerability (CNVD-2025-22593)
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Unspecified Vulnerability in Multiple Apple Products (CNVD-2025-22673)
Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Tahoe is an operating system.... A security vulnerability exists in several Apple products that stems from improper handling of sensitive information and can be exploited...
PT-2025-38485
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A local attacker with low privileges on the Windows system where the software is installed can corrupt sensitive data. A data folder is created with weak privileges, allowing any user logged...
ZTE T5400 License Issue Vulnerability
The ZTE T5400 is a router from China's ZTE Corporation ZTE. The ZTE T5400 suffers from an authorization issue vulnerability, which stems from improper control of web module interface privileges, and can be exploited by an attacker to obtain sensitive information...
CVE-2023-49367
CVE-2023-49367 affects Kyocera Command Center RX EXOSYS M5521cdn. The issue is a user interface defect that allows a remote attacker to obtain sensitive information by inspecting packets sent by the user. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates a network-exposed vulner...
CVE-2023-49367
An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user...
PT-2025-38437
Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX EXOSYS M5521cdn affected versions not specified Description An issue in the user interface allows remote attackers to obtain sensitive information by inspecting sent packages. Recommendations At the moment, there is n...
Kyocera Command Center RX EXOSYS M5521cdn 安全漏洞
Kyocera Command Center RX EXOSYS M5521cdn is a color multifunction printer from Kyocera, USA. A security vulnerability exists in the Kyocera Command Center RX EXOSYS M5521cdn, which stems from a user interface issue, and could allow a remote attacker to obtain sensitive information by inspecting...
Mozilla Firefox Information Disclosure Vulnerability (CNVD-2025-24635)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2025-43317
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...