Lucene search
+L

29521 matches found

CNVD
CNVD
added 2025/09/11 12:00 a.m.12 views

Adobe After Effects Out-of-Bounds Read Vulnerability

Adobe After Effects AE for short is a professional film and television post-effects software launched by Adobe in 1993, support for Windows and MacOS dual-platform, mainly for film and television special effects, motion graphics design and video synthesis. Adobe After Effects has an out-of-bounds...

5.5CVSS6.5AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/10 11:17 p.m.11 views

CVE-2025-58454

WeGIA is a Web manager for charitable institutions. A SQL Injection vulnerability was identified in WeGIA versions 3.4.10 and prior inthe endpoint /WeGIA/html/memorando/listardespachos.php, in the idmemorando parameter. This vulnerability allow an authorized attacker to execute arbitrary SQL...

9.3CVSS8.1AI score0.0036EPSS
SaveExploits1References1
CVE
CVE
added 2025/09/10 7:49 p.m.81 views

CVE-2025-54376

Hoverfly (versions

8.8CVSS6.7AI score0.00705EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2025/09/10 4:15 p.m.15 views

CVE-2025-43888

Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

8.8CVSS0.00142EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 4:15 p.m.11 views

CVE-2025-43888

Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

7.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 3:15 p.m.12 views

CVE-2025-56578

An issue in RTSPtoWeb v.2.4.3 allows a remote attacker to obtain sensitive information and executearbitrary code via the lack of authentication mechanisms...

5.7CVSS0.00329EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/10 1:15 p.m.10 views

CVE-2025-10227

Missing Encryption of Sensitive Data CWE-311 in the Object Archive component in AxxonSoft Axxon One C-Werk before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at...

4.6CVSS5.4AI score0.00076EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 7:15 a.m.50 views

CVE-2025-9979

The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior. This is due to missing capability checks on the Maspikspamlogdownloadcsv function. This makes it possible for authenticated attackers, with subscriber-level access and above, to export and download...

4.3CVSS0.00247EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.12 views

Dell PowerProtect Data Manager 日志信息泄露漏洞

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. A log information disclosure vulnerability exists in Dell PowerProtect Data Manager versions 19.19 and 19.20, which...

8.8CVSS6.1AI score0.00142EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-27930

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An authenticated us...

6.5CVSS6.5AI score0.01139EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-23791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects...

7.5CVSS6.6AI score0.00515EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-36201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in JerryscriptProject jerryscript v.3.0.0 allows an attacker to obtain sensitive information via a crafted script to the arrays. CVE-2023-36201 Note th...

7.5CVSS7.2AI score0.00609EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.11 views

PT-2025-37054

Name of the Vulnerable Software and Affected Versions: RTSPtoWeb version 2.4.3 Description: An issue exists that allows a remote attacker to obtain sensitive information and execute arbitrary code due to a lack of authentication mechanisms. Recommendations: At the moment, there is no information...

7.2AI score0.00329EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/10 12:00 a.m.27 views

CVE-2025-56466

The CVE-2025-56466 entry concerns the Dietly Android app (version 1.25.0). The connected documents confirm a hardcoded credential issue in Dietly v1.25.0, which can lead to disclosure of sensitive information. The vulnerability arises from credentials hardcoded into the application, enabling atta...

7.5CVSS6.4AI score0.00296EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.7 views

MasterLife Solutions Dietly App 安全漏洞

MasterLife Solutions Dietly App is a diet management application from MasterLife Solutions, Poland. A security vulnerability exists in MasterLife Solutions Dietly App version v1.25.0, which stems from hard-coded credentials and could lead to the disclosure of sensitive information...

7.5CVSS6.4AI score0.00296EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-2416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check fo...

10CVSS8.4AI score0.01058EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-14240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a sensitive information disclosure vulnerability in document.php in Dolibarr ERP/CRM version 6.0.0 via the file parameter. CVE-2017-14240 Note that...

7.5CVSS7.4AI score0.01156EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.8 views

PT-2025-37053

Name of the Vulnerable Software and Affected Versions: Dietly version 1.25.0 Description: The application contains hardcoded credentials, potentially allowing attackers to gain sensitive information. Recommendations: Update to a version without hardcoded credentials. At the moment, there is no...

6.4AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.9 views

MCP MariaDB Server 安全漏洞

MCP MariaDB Server is an open source server implementation of the Large Language Model Context Protocol for MariaDB. A security vulnerability exists in MCP MariaDB Server version 0.1.0, which stems from a lack of user authentication for the SSE service and could lead to the disclosure of sensitiv...

7.5CVSS6.5AI score0.0034EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/09/10 12:00 a.m.4 views

CVE-2025-56466

Hardcoded credentials in Dietly v1.25.0 for android allows attackers to gain sensitive information...

6.6AI score0.00296EPSS
SaveExploits0References1
Rows per page
Query Builder