Lucene search
+L

5772 matches found

OSV
OSV
added 2025/04/23 8:52 a.m.53 views

BIT-CILIUM-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

4CVSS4.2AI score0.00134EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/23 12:0 a.m.68 views

CVE-2025-28169

BYD QIN PLUS DM-i Dilink OS versions v3.0_13.1.7.2204050.1 through v3.0_13.1.7.2312290.1_0 send broadcasts to the manufacturer’s cloud server unencrypted. This enables a network-level attacker to perform a man-in-the-middle attack, compromising confidentiality, integrity, and availability. The CV...

8.1CVSS7.6AI score0.0033EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.9 views

BYD QIN PLUS DM-i with Dilink OS 安全漏洞

BYD QIN PLUS DM-i with Dilink OS is a plug-in hybrid electric sedan with Dilink OS from BYD China. A security vulnerability exists in BYD QIN PLUS DM-i with Dilink OS versions v3.013.1.7.2204050.1 through v3.013.1.7.2312290.10, which originates from an unencrypted send broadcast and could lead to...

8.1CVSS6.5AI score0.0033EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/04/23 12:0 a.m.20 views

CVE-2025-28169

BYD QIN PLUS DM-i Dilink OS v3.013.1.7.2204050.1 to v3.013.1.7.2312290.10 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack...

0.0033EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.17 views

PT-2025-17668 · Byd · Byd Qin Plus Dm-I Dilink Os

Name of the Vulnerable Software and Affected Versions: BYD QIN PLUS DM-i Dilink OS versions v3.0 13.1.7.2204050.1 through v3.0 13.1.7.2312290.1 0 Description: The issue allows attackers to execute a man-in-the-middle attack because the affected software sends broadcasts to the manufacturer's clou...

8.1CVSS6.3AI score0.0033EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/04/23 12:0 a.m.6 views

CVE-2025-28169

BYD QIN PLUS DM-i Dilink OS v3.013.1.7.2204050.1 to v3.013.1.7.2312290.10 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack...

7.4AI score0.0033EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/04/22 12:0 a.m.27 views

Unspecified Vulnerability in JetBrains Toolbox App

JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...

7.5CVSS5.9AI score0.00146EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:0 a.m.11 views

The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database, which involves unencrypted storage of critical information, allows a hacker to disclose the protected data.

The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

7.1CVSS5.5AI score
SaveExploits0Affected Software1
OSV
OSV
added 2025/04/21 3:34 p.m.4 views

CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

4CVSS3.9AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/21 3:34 p.m.30 views

CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

4CVSS0.00134EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/21 12:0 a.m.8 views

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium that stems from a contention...

4CVSS3.8AI score0.00134EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/17 4:15 p.m.11 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

7.5CVSS5.8AI score0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.32 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

7.5CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/17 3:56 p.m.28 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

6.9CVSS0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:56 p.m.12 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

6.9CVSS6.9AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/17 3:56 p.m.77 views

CVE-2025-43013

JetBrains Toolbox App prior to version 2.6 is affected by CVE-2025-43013 due to unencrypted credential transmission during SSH authentication. The issue is documented across multiple sources (Red Hat, NVD, CNVD, Nessus plugin, and PT Security) and is tied specifically to the SSH plugin’s handling...

7.5CVSS7.2AI score0.00146EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/17 12:0 a.m.12 views

PT-2025-17199 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

7.5CVSS6.4AI score0.00146EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/04/17 12:0 a.m.9 views

JetBrains Toolbox App 安全漏洞

JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...

7.5CVSS6.5AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/16 11:15 p.m.6 views

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...

6.5CVSS5.8AI score0.00198EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/16 11:15 p.m.15 views

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...

6.5CVSS0.00198EPSS
SaveExploits1References2
Rows per page
Query Builder