Lucene search
+L

3578 matches found

Microsoft CVE
Microsoft CVE
•added 2025/08/07 7:00 a.m.•19 views

net: clear the dst when changing skb protocol

...

7.8CVSS6.8AI score0.00203EPSS
SaveExploits0
NVD
NVD
•added 2025/08/06 9:15 p.m.•26 views

CVE-2025-51055

Insecure Data Storage of credentials has been found in /apivedo/configuration/config.yml file in Vedo Suite version 2024.17. This file contains clear-text credentials, secret keys, and database information...

8.6CVSS0.00323EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2025/08/06 12:00 a.m.•23 views

PT-2025-32219 · Unknown · Vedo Suite

Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: The application stores credentials in clear-text within the /api vedo/configuration/config.yml file. This file contains sensitive information, including credentials, secret keys, and database informatio...

8.6CVSS5.8AI score0.00323EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
•added 2025/08/06 12:00 a.m.•9 views

CVE-2025-51055

Insecure Data Storage of credentials has been found in /apivedo/configuration/config.yml file in Vedo Suite version 2024.17. This file contains clear-text credentials, secret keys, and database information...

5.6AI score0.00323EPSS
SaveExploits2References2
CVE
CVE
•added 2025/08/06 12:00 a.m.•72 views

CVE-2025-51055

The Vedo Suite (version 2024.17 ) by Bottinelli Informatica contains an information disclosure vulnerability due to insecure data storage. The application stores sensitive information, including clear-text credentials , secret keys , and database information , within the /api_vedo/configuration/c...

8.6CVSS5.6AI score0.00323EPSS
SaveExploits2References1Affected Software1
RedHat Linux
RedHat Linux
•added 2025/08/04 6:02 p.m.•15 views

python3.11-django-ansible-base: Sensitive Authenticator Secrets Returned in Clear Text via API in AAP

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS5.3AI score0.00255EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/08/04 12:00 a.m.•17 views

XBoot security vulnerability

XBoot is a one-stop front-end and back-end separation rapid development platform for Exrick individual developers. A security vulnerability exists in XBoot 3.3.4 and earlier versions, which stems from sensitive information being stored in a cookie in clear text...

6.3CVSS5.3AI score0.00328EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2025/07/31 2:12 p.m.•19 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS5.3AI score0.00255EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2025/07/31 2:12 p.m.•27 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS5.3AI score0.00255EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/07/31 2:12 p.m.•35 views

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

4.4CVSS0.00255EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•10 views

Linux i40e_clearHW() DoS

The vulnerability of the i40eclearhw function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.8AI score0.00211EPSS
SaveExploits0References16Affected Software6
CNNVD
CNNVD
•added 2025/07/28 12:00 a.m.•20 views

Maka GPS Marbella KR8s security vulnerabilities

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from a password written in clear text to the SD card...

9.8CVSS5.9AI score0.00339EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/07/26 12:00 a.m.•26 views

Comodo Dragon security vulnerabilities

Comodo Dragon is a web browser from Comodo China. A security vulnerability exists in Comodo Dragon version 134.0.6998.179 and prior versions, which stems from a component IP DNS Leakage Detector that causes sensitive information to be transmitted in clear text...

6.3CVSS5.2AI score0.00514EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/07/21 5:44 a.m.•32 views

CVE-2025-6720

The Vchasno Kasa plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clearalllog function in all versions up to, and including, 1.0.3. This makes it possible for unauthenticated attackers to clear log files...

5.3CVSS6.3AI score0.00425EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/21 12:00 a.m.•17 views

IBM Cognos Analytics Mobile security vulnerabilities

IBM Cognos Analytics Mobile is an application from International Business Machines IBM, Inc. Integrates reporting, modeling, analytics, dashboards, cases, and event management. A security vulnerability exists in IBM Cognos Analytics Mobile versions 1.1.0 through 1.1.22, which originates from the...

7.5CVSS5.7AI score0.00268EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/18 12:00 a.m.•11 views

CVE-2025-2425: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check to time-of-use race condition vulnerability potentially allowed an attacker to use the installed ESET security software to clear the content of an arbitrary file on the file system...

5.1CVSS6AI score0.0012EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/17 12:00 a.m.•21 views

Brocade ASCG security vulnerability

Brocade ASCG is a networking feature from Brocade USA that is primarily used to simplify SAN architecture and optimize resource utilization. A security vulnerability exists in Brocade ASCG versions prior to 3.3.0, which stems from the CLI history storing commands in clear text, which could lead t...

7.1CVSS5.7AI score0.00107EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/17 12:00 a.m.•13 views

PT-2025-33597

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where a reference to pmc-idev is released prematurely in the mld del delrec function. This occurs because pmc-idev is still used in ip6 mc clear src,...

7.8CVSS6.3AI score0.00163EPSS
SaveExploits0
SUSE Linux
SUSE Linux
•added 2025/07/16 3:48 p.m.•17 views

Security update for docker

This update for docker fixes the following issues: Update to Docker 28.2.2-ce bsc1243833, bsc1242114: CVE-2025-0495: Fixed credential leakage to telemetry endpoints when credentials allowed to be set as attribute values in cache-to/cache-from configuration.bsc1239765 CVE-2025-22872:...

6.5CVSS6.4AI score0.00545EPSS
SaveExploits0References20
RedhatCVE
RedhatCVE
•added 2025/07/12 10:14 p.m.•22 views

CVE-2025-6392

Brocade SANnav before Brocade SANnav 2.4.0a could log database passwords in clear text in audit logs when the daily data dump collector invokes docker exec commands. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server...

6.7CVSS6.2AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder