Lucene search
+L

2920 matches found

RedhatCVE
RedhatCVE
•added 2025/02/15 6:23 a.m.•23 views

CVE-2025-1060

CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker...

8.7CVSS6.8AI score0.00247EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/14 3:37 p.m.•31 views

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

8.8CVSS6.4AI score0.00309EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/14 12:00 a.m.•32 views

Progress Telerik Report Server < 11.0.25.211 Cleartext Transmission

The version of Progress Telerik Report Server installed on the remote host is affected by an cleartext transmission vulnerability. In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive...

8.8CVSS5.6AI score0.00309EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/13 12:00 a.m.•8 views

CVE-2025-1060: Cleartext Transmission of Sensitive Information

CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker...

8.7CVSS5.9AI score0.00247EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/12 4:15 p.m.•54 views

CVE-2025-0556

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

8.8CVSS0.00309EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/12 3:11 p.m.•92 views

CVE-2025-0556

In Progress Telerik Report Server, before 2025 Q1 (11.0.25.211) using the older .NET Framework implementation, the communication of non-sensitive information between the service agent process and the app host process happens over an unencrypted tunnel, exposing it to potential local network traff...

8.8CVSS6.5AI score0.00309EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/02/12 3:11 p.m.•50 views

CVE-2025-0556 Telerik Report Server Clear Text Transmission of Agent Commands

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

8.8CVSS0.00309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/12 12:00 a.m.•21 views

PT-2025-6792 · Progress · Progress Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2025 Q1 11.0.25.211 Description: The issue concerns the communication of non-sensitive information between the service agent process and app host process in In Progress Telerik Report Server...

8.8CVSS6.8AI score0.00309EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/12 12:00 a.m.•10 views

CVE-2025-0556: Cleartext Transmission of Sensitive Information

In Progress® Telerik® Report Server, versions prior to 2025 Q1 11.0.25.211 when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local netwo...

8.8CVSS5.7AI score0.00309EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•16 views

Azure Linux 3.0 Security Update: kernel (CVE-2010-4563)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2010-4563 advisory. - The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the networ...

5CVSS8.1AI score0.02892EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•9 views

CVE-2024-43187: Cleartext Transmission of Sensitive Information

IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

7.5CVSS5.8AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/27 5:58 a.m.•77 views

CVE-2024-43445

CVE-2024-43445 affects OTRS and OTRS Community Edition, where HTTP responses may omit the X-Content-Type-Options: nosniff header. This allows MIME type confusion when uploading or inserting content. Affected: OTRS 7.0.x, 8.0.x, 2023.x, 2024.x and OTRS Community Edition 6.0.x (and related products...

5.4CVSS5.4AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/27 5:58 a.m.•39 views

CVE-2024-43445 Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing

A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...

5.4CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/27 5:58 a.m.•11 views

CVE-2024-43445 Missing X-Content-Type-Options: nosniff Header Allows MIME Type Sniffing

A vulnerability exists in OTRS and OTRS Community Edition that fail to set the HTTP response header X-Content-Type-Options to nosniff. An attacker could exploit this vulnerability by uploading or inserting content that would be treated as a different MIME type than intended. This issue affects:...

5.4CVSS5.4AI score0.00233EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/12 12:00 a.m.•8 views

CVE-2024-42181: Cleartext Transmission of Sensitive Information

HCL MyXalytics is affected by a cleartext transmission of sensitive information vulnerability. The application transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

7.5CVSS5.7AI score0.00182EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/03 12:00 a.m.•22 views

IBM PowerHA SystemMirror security vulnerabilities

IBM PowerHA SystemMirror is a high-availability cluster multiprocessor program from International Business Machines IBM. A security vulnerability exists in IBM PowerHA SystemMirror versions 7.4 and 7.5. An attacker exploiting this vulnerability could obtain cookie values by snooping on traffic...

4.3CVSS6.5AI score0.00186EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/17 12:00 a.m.•7 views

CVE-2024-49819: Cleartext Transmission of Sensitive Information

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information in cleartext in a communication channel that can be sniffed by unauthorized actors...

7.5CVSS5.9AI score0.00257EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/06 7:15 p.m.•21 views

CVE-2024-47146

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal...

6.5CVSS5.7AI score0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/06 6:27 p.m.•52 views

CVE-2024-47146 Ruijie Reyee OS Resource Leak

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal...

7.1CVSS0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•7 views

CVE-2024-47146: Transmission of Private Resources into a New Sphere

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal...

7.1CVSS8AI score0.00276EPSS
SaveExploits0References1
Rows per page
Query Builder