Lucene search
+L

27 matches found

OSV
OSV
added 2026/08/28 10:50 p.m.13 views

CVE-2026-55860 MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a...

5.9CVSS5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/28 7:30 a.m.5 views

OST-C2-Spec

Bozza: Richiesta di Discussione Abstract Questo documento fornisce una panoramica della Versione 1 della specifica OST C&C. È inteso a fornire una descrizione dettagliata dei messaggi e dei campi all'interno di tali messaggi. Introduzione La motivazione alla base di questa specifica è fornire un...

5.9AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 10:02 a.m.108 views

CVE-2026-3012 Samba: group policy certificate enrollment uses http:// without validation

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability t...

8CVSS0.00261EPSS
SaveExploits0References19
EUVD
EUVD
added 2026/05/13 9:32 p.m.30 views

EUVD-2026-30113

Exposure of the QKEY used as input into the ‘OTA-Quantum’ device registration process and internal system keys via an unauthenticated and unencrypted HTTP GET method in the Arqit Symmetric Key Agreement Platform. This issue affects Symmetric Key Agreement Platform: before 26.03...

8.7CVSS5.8AI score0.00208EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/23 7:33 p.m.11 views

CVE-2026-41275

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, the password reset functionality on cloud.flowiseai.com sends a reset password link over the unsecured HTTP protocol instead of HTTPS. This behavior introduces the risk of a man-in-the-middle...

7.5CVSS5.8AI score0.00192EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-25387

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.0032EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-25388

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.0032EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/06/13 7:43 a.m.5 views

Replay Attack

Overview salt is a new approach to infrastructure management built on a dynamic communication bus. Salt can be used for data-driven orchestration, remote execution for any infrastructure, configuration management for any app stack, and much more. Affected versions of this package are vulnerable t...

5.9CVSS7.1AI score0.00238EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:09 a.m.9 views

CVE-2023-21220

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS6.1AI score0.0032EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:09 a.m.13 views

CVE-2023-21219

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS6.1AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/28 6:15 p.m.32 views

CVE-2023-21220

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS7.2AI score0.0032EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/06/28 6:15 p.m.7 views

CVE-2023-21219

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS7.3AI score0.0032EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/06/28 6:15 p.m.10 views

CVE-2023-21220

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS7.3AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/28 6:15 p.m.27 views

CVE-2023-21219

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.5CVSS7.2AI score0.0032EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/28 6:15 p.m.34 views

Information disclosure

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

5CVSS7.1AI score0.0032EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/28 6:15 p.m.27 views

Information disclosure

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

5CVSS7.1AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/28 12:00 a.m.11 views

PT-2023-18006 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue involves the possible use of unencrypted transport over cellular networks due to an insecure default value, which could lead to remote information disclosure without requiring additional execution...

7.5CVSS7.2AI score0.0032EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/06/28 12:00 a.m.17 views

CVE-2023-21220

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

6.6AI score0.0032EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/28 12:00 a.m.10 views

PT-2023-18007 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue involves the possible use of unencrypted transport over cellular networks due to an insecure default value, potentially leading to remote information disclosure without requiring additional execution...

7.5CVSS7.1AI score0.0032EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/06/28 12:00 a.m.44 views

CVE-2023-21219

there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

7.3AI score0.0032EPSS
SaveExploits0References1
Rows per page
Query Builder