Lucene search
+L

5763 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 10:20 p.m.7 views

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS6.3AI score0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 12:31 a.m.8 views

EUVD-2025-201834

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/08 10:15 p.m.9 views

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 10:15 p.m.8 views

CVE-2025-36017

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS5.8AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/08 9:37 p.m.16 views

CVE-2025-36017

The CVE-2025-36017 issue affects IBM Controller (11.1.0–11.1.1) and IBM Cognos Controller (11.0.0–11.0.1 FP6), where unencrypted sensitive information is stored in environment variable files that an authenticated user can access. Red Hat and other feeds corroborate this description, noting the sa...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/08 9:37 p.m.30 views

CVE-2025-36017 IBM Controller Information Disclosure

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/08 1:19 a.m.13 views

CVE-2023-53769 virt/coco/sev-guest: Double-buffer messages

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

9.3CVSS6.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/12/08 1:19 a.m.7 views

CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy...

9.3CVSS5.1AI score0.00099EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.9 views

PT-2025-49600

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive information in environmental variables files which can be obtained by an authenticated user...

6.5CVSS6.4AI score0.0026EPSS
SaveExploits0References2
Nextcloud
Nextcloud
added 2025/12/05 7:58 a.m.12 views

Information disclosure via Desktop client when attempting to lock a file inside a end-to-end encrypted directory

None...

2.7CVSS5.2AI score0.0029EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.13 views

Nextcloud Desktop Client 安全漏洞

Nextcloud Desktop Client is an open source file synchronization and sharing tool from Nextcloud GmbH. A security vulnerability exists in Nextcloud Desktop Client versions prior to 3.16.5, which stems from the unencrypted sending of file paths in an end-to-end encrypted directory, which could lead...

2.7CVSS6.1AI score0.0029EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/12/05 12:0 a.m.8 views

The vulnerability of the Zabbix IT-infrastructure monitoring system, related to the storage of passwords in an unencrypted form, allows a perpetrator to gain access to protected information.

The vulnerability of the Zabbix IT-infrastructure monitoring system lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability allows a malicious actor to gain access to protected information...

3.3CVSS5.8AI score0.00542EPSS
SaveExploits0References9Affected Software4
RedhatCVE
RedhatCVE
added 2025/12/03 5:2 p.m.7 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

4.1CVSS6.8AI score0.00165EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/02 3:15 p.m.6 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

4.1CVSS5.8AI score0.00738EPSS
SaveExploits9References2
RedhatCVE
RedhatCVE
added 2025/12/02 12:19 a.m.19 views

CVE-2024-32384

Kerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over HTTP, without HTTPS support. This lack of transport layer security allows a man-in-the-middle attacker to intercept and modify traffic between the client and the device...

7.4CVSS6.8AI score0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/02 12:0 a.m.17 views

CVE-2025-59701

Summary: CVE-2025-59701 affects Entrust nShield Connect XC, nShield 5c, and nShield HSMi up to version 13.6.11 or 13.7. The vulnerability arises because the Appliance SSDs are unencrypted, allowing a physically proximate attacker with elevated privileges to read and modify SSD contents. The avail...

4.1CVSS6.4AI score0.00165EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/12/02 12:0 a.m.16 views

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker with elevated privileges can read and write the contents of an unencrypted Appliance SSD...

4.1CVSS6.4AI score0.00165EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/02 12:0 a.m.33 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

0.00165EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/12/02 12:0 a.m.8 views

PT-2025-48702

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

6.8AI score0.00165EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/12/02 12:0 a.m.3 views

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

6.4AI score0.00165EPSS
SaveExploits1References2
Rows per page
Query Builder