The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...

GitLab 17.6 < 18.3.6 / 18.4 < 18.4.4 / 18.5 < 18.5.2 (CVE-2025-7000)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorize...

The vulnerability of the data type processing function in PostgreSQL database management systems allows attackers to access memory bytes of the server and obtain confidential information.

The vulnerability of the oidvector data type processing function in the PostgreSQL database management system is related to reading beyond the buffer memory boundaries. Exploiting this vulnerability can allow an attacker to access server memory bytes and gain access to confidential information...

CVE-2026-24322 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)

SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability...

The vulnerability of the nfsd_splice_actor() function in the fs/nfsd/vfs.c module, which is part of the Linux kernel’s Network File System support, allows a hacker to cause a service failure.

The vulnerability of the nfsdspliceactor function in the fs/nfsd/vfs.c module, which is part of the Linux network file system support, involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the get_pat_info() function in the arch/x86/mm/pat/memtype.c module of the Linux operating system’s x86 kernel allows a hacker to induce a service failure.

The vulnerability of the getpatinfo function in the arch/x86/mm/pat/memtype.c module of the Linux operating system’s x86 kernel involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the virtio_irq_get_affinity() function in the drivers/virtio/virtio.c module, which supports the virtio bus in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the virtioirqgetaffinity function in the drivers/virtio/virtio.c module, which is part of the virtio bus support in Linux kernel, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An authentication bypass vulnerability exists in the Huawei HarmonyOS window module, which can be exploited by an attacker to compromise confidentiality...

CVE-2026-1432

SQL injection vulnerability in the Buroweb platform version 2505.0.12, specifically in the 'tablon' component. This vulnerability is present in several parameters that do not correctly sanitize user input in the endpoint '/sta/CarpetaPublic/doEvent?APPCODE=STACODE=TABLON'. Exploiting this...

The vulnerability of the do_mount_setattr() function in the fs/namespace.c file of the Linux kernel’s file system allows a attacker to cause a service failure.

The vulnerability of the domountsetattr function in the fs/namespace.c file of the Linux file system is related to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-11598 Exposure of Confidential Information in mObywatel application

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended reopening the app would require the user to log in. The data exposed depends on the last application view...

CVE-2026-1475

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter ‘Idusuario' in ‘/evaluacionaccionesevalua.aspx’, could allow an attacker to extract...

CVE-2026-1480 Out-of-band SQL injection in Quatuor Performance Evaluation

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario' in '/evaluacionobjetivosanyosigevalua.aspx', could allow an attacker to...

CVE-2026-1473

An out-of-band SQL injection vulnerability OOB SQLi has been detected in the Performance Evaluation EDD application developed by Gabinete Técnico de Programación. Exploiting this vulnerability in the parameter 'Idusuario’ in '/evaluacioncompetenciasevalua.aspx', could allow an attacker to extract...

CVE-2025-41728

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially...

The vulnerability of the Business Server Pages Application, related to the lack of authentication, allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the Business Server Pages Application is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to confidential information...

CVE-2026-21940

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: User and User Group. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of...

Huawei HarmonyOS Memo Module Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS memo module, which can be exploited by an attacker to compromise confidentiality...

CVE-2025-67004

Disputed An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back. It can Disclosure the source code or any other confidential information if weaponize accordingly. NOTE: A community member states that this is n...

CVE-2018-1000827

Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...