Lucene search
+L

4157 matches found

RedhatCVE
RedhatCVE
•added 2025/04/29 11:10 a.m.•36 views

CVE-2025-3966

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may be launched...

5.3CVSS6.5AI score0.0051EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/27 10:15 a.m.•31 views

CVE-2025-3966

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may...

5.3CVSS0.0051EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/04/27 10:00 a.m.•10 views

CVE-2025-3966 itwanger paicoding Browsing History home information disclosure

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may...

5.3CVSS4.5AI score0.0051EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/04/27 10:00 a.m.•48 views

CVE-2025-3966 itwanger paicoding Browsing History home information disclosure

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may...

5.3CVSS0.0051EPSS
SaveExploits1References5
CVE
CVE
•added 2025/04/27 10:00 a.m.•89 views

CVE-2025-3966

The CVE-2025-3966 entry concerns itwanger paicoding 1.0.3, specifically the Browsing History Handler’s /user/home?userId=1&homeSelectType=read functionality. The issue, described as information disclosure, arises from an unspecified manipulation of that endpoint. Reports indicate the attack could...

5.3CVSS4.5AI score0.0051EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/04/27 10:00 a.m.•10 views

CVE-2025-3966 itwanger paicoding Browsing History home information disclosure

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may...

5.3CVSS4.9AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/27 12:00 a.m.•7 views

CVE-2025-3966: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may...

5.3CVSS4.9AI score0.0051EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/04/25 11:44 p.m.•18 views

CVE-2025-2595

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...

5.3CVSS7.2AI score0.0046EPSS
SaveExploits0References1
Mend
Mend
•added 2025/04/24 7:30 a.m.•6 views

CVE-2025-1908

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

8.7CVSS0.00386EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/24 12:00 a.m.•5 views

CVE-2025-1908: Undefined Security Weakness

An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...

7.7CVSS6.5AI score0.00386EPSS
SaveExploits1References1
NVD
NVD
•added 2025/04/23 8:15 a.m.•26 views

CVE-2025-2595

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...

5.3CVSS0.0046EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/23 7:54 a.m.•12 views

CVE-2025-2595 Forced Browsing Vulnerability in CODESYS Visualization

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...

5.3CVSS5.5AI score0.0046EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/23 7:54 a.m.•85 views

CVE-2025-2595

CVE-2025-2595 involves an unauthenticated remote attacker who can bypass the user management in CODESYS Visualization via forced browsing, enabling reads of visualization template files or static elements. The vulnerability is described across multiple sources as a forced-browsing/auth bypass iss...

5.3CVSS7.2AI score0.0046EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/23 7:54 a.m.•39 views

CVE-2025-2595 Forced Browsing Vulnerability in CODESYS Visualization

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...

5.3CVSS0.0046EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/23 12:00 a.m.•6 views

CVE-2025-2595: Direct Request

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing...

5.3CVSS5.8AI score0.0046EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/13 3:36 p.m.•36 views

CVE-2023-42973

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI...

4CVSS5.8AI score0.00189EPSS
SaveExploits0References3
OSV
OSV
•added 2025/04/11 3:15 p.m.•16 views

CVE-2023-42973

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI...

4CVSS5.7AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/11 3:15 p.m.•49 views

CVE-2023-42973

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI...

4CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/11 2:53 p.m.•80 views

CVE-2023-42973

The iOS and iPadOS operating systems are vulnerable to an improper authorization issue (CWE-285) that allows access to Private Browsing tabs without authentication. This flaw may lead to the disclosure of protected information . The vulnerability affects versions prior to iOS 17 and iPadOS 17 , s...

4CVSS5.9AI score0.00189EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
•added 2025/04/11 2:53 p.m.•13 views

CVE-2023-42973

Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI...

3.3AI score0.00189EPSS
SaveExploits0References1
Rows per page
Query Builder