Lucene search
+L

6781 matches found

CNNVD
CNNVD
•added 2025/04/23 12:00 a.m.•17 views

BYD QIN PLUS DM-i with Dilink OS 安全漏洞

BYD QIN PLUS DM-i with Dilink OS is a plug-in hybrid electric sedan with Dilink OS from BYD China. A security vulnerability exists in BYD QIN PLUS DM-i with Dilink OS versions v3.013.1.7.2204050.1 through v3.013.1.7.2312290.10, which originates from an unencrypted send broadcast and could lead to...

8.1CVSS6.5AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/23 12:00 a.m.•4 views

CVE-2025-28169: Improper Certificate Validation

BYD QIN PLUS DM-i Dilink OS v3.013.1.7.2204050.1 to v3.013.1.7.2312290.10 was discovered to cend broadcasts to the manufacturer's cloud server unencrypted, allowing attackers to execute a man-in-the-middle attack...

8.1CVSS6AI score0.00344EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/22 12:00 a.m.•16 views

The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database, which involves unencrypted storage of critical information, allows a hacker to disclose the protected data.

The vulnerability of the pgCodeKeeper plugin for the PostgreSQL database is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...

7.1CVSS5.5AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•2 views

PT-2025-36230

Уязвимость плагина pgCodeKeeper СУБД PostgreSQL связана с незашифрованным хранением критичной информации. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию...

4.9CVSS5.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2025/04/22 12:00 a.m.•47 views

Unspecified Vulnerability in JetBrains Toolbox App

JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...

7.5CVSS5.9AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/21 3:34 p.m.•41 views

CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

4CVSS0.0014EPSS
SaveExploits0References2
Mend
Mend
•added 2025/04/21 3:34 p.m.•5 views

CVE-2025-32793

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

6.3CVSS0.0014EPSS
SaveExploits0References6
OSV
OSV
•added 2025/04/21 3:34 p.m.•7 views

CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...

4CVSS3.9AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/21 12:00 a.m.•17 views

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium that stems from a contention...

4CVSS3.8AI score0.0014EPSS
SaveExploits0References2
OSV
OSV
•added 2025/04/17 4:15 p.m.•22 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

7.5CVSS5.8AI score0.00152EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•41 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

7.5CVSS0.00152EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/17 3:56 p.m.•15 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

6.9CVSS6.9AI score0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/17 3:56 p.m.•38 views

CVE-2025-43013

In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible...

6.9CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 3:56 p.m.•98 views

CVE-2025-43013

JetBrains Toolbox App prior to version 2.6 is affected by CVE-2025-43013 due to unencrypted credential transmission during SSH authentication. The issue is documented across multiple sources (Red Hat, NVD, CNVD, Nessus plugin, and PT Security) and is tied specifically to the SSH plugin’s handling...

7.5CVSS7.2AI score0.00152EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•19 views

JetBrains Toolbox App 安全漏洞

JetBrains Toolbox App is an application for managing JetBrains development tools that helps users install, update and manage multiple JetBrains development tools. A security vulnerability exists in JetBrains Toolbox App that stems from unencrypted transmission of credentials during SSH...

7.5CVSS6.5AI score0.00152EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•20 views

PT-2025-17199 · Jetbrains · Jetbrains Toolbox App

Name of the Vulnerable Software and Affected Versions: JetBrains Toolbox App versions prior to 2.6 Description: The issue concerns unencrypted credential transmission during SSH authentication. Recommendations: For versions prior to 2.6, update to version 2.6 or later to resolve the issue...

7.5CVSS6.4AI score0.00152EPSS
SaveExploits0References9
OSV
OSV
•added 2025/04/16 11:15 p.m.•16 views

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...

6.5CVSS5.8AI score0.00199EPSS
SaveExploits1References2
NVD
NVD
•added 2025/04/16 11:15 p.m.•25 views

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...

6.5CVSS0.00199EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Google Chrome OS 安全漏洞

Google ChromeOS is a set of Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from a memory misreference vulnerability that is caused by a flaw in ComponentInstaller. An attacker could exploit the vulnerability to intercept device management requests b...

6.5CVSS6.7AI score0.00199EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/04/11 12:00 a.m.•2 views

PT-2025-31627

Уязвимость SCADA-системы TRACE MODE 7 связана с хранением конфиденциальной информации в незашифрованном виде в памяти. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...

1.7CVSS5.8AI score
SaveExploits0References1
Rows per page
Query Builder