2026 matches found
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the SCT extension parsing process. An attacker can access confidential information by providing a specially crafted certificate containing a malformed SCT extension during X.509 certificate verificatio...
CVE-2025-42963
A critical vulnerability in SAP NetWeaver Application server for Java Log Viewer enables authenticated administrator users to exploit unsafe Java object deserialization. Successful exploitation can lead to full operating system compromise, granting attackers complete control over the affected...
CVE-2025-42961
Due to a missing authorization check in SAP NetWeaver Application server for ABAP, an authenticated user with high privileges could exploit the insufficient validation of user permissions to access sensitive database tables. By leveraging overly permissive access configurations, unauthorized...
The vulnerability of the channel.c component in the Linux operating system’s kernel allows a hacker to gain access to confidential data.
The vulnerability of the channel.c component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to access confidential data...
The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to gain access to confidential data
The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to reading data from buffer files beyond the allowed limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the Pgpool-II database connection pool management tool, related to information disclosure, allows a hacker to gain access to confidential data.
The vulnerability of the Pgpool-II database connection pool management tool is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of the validator component in the Symfony software development and web application management platform allows a hacker to access confidential data.
The vulnerability of the validator component in the Symfony software development and management platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the arch/x86 kernel component of the Linux operating system, which allows a hacker to gain access to confidential data
The vulnerability of the arch/x86 kernel component of the Linux operating system is related to the exposure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2025-6017 Rhacm: users with clusterreader role can see credentials from managed-clusters
A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2.12, before 2.12.4. This vulnerability allows an unprivileged user to view confidential managed cluster credentials through the UI. This information should only be accessible to...
The vulnerability of the Pgpool-II database connection pool management tool lies in the unencrypted storage of confidential information, allowing attackers to gain access to this confidential data.
The vulnerability of the Pgpool-II database connection pool management tool is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data...
The vulnerability of the apr.h component in the APR library allows a hacker to gain access to confidential data.
The vulnerability of the apr.h component in the APR library is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker to access confidential data...
Vulnerability of the ipoctal_port_activate() function in the drivers/ipack/devices/ipoctal.c module – The IndustryPack device support driver for the Linux operating system allows attackers to compromise the confidentiality and accessibility of protected information.
Vulnerability of the ipoctalportactivate function in the drivers/ipack/devices/ipoctal.c module – The IndustryPack device support driver for the Linux operating system contains a vulnerability that may lead to the disclosure of confidential information. Exploiting this vulnerability could allow a...
Vulnerability of the vmbus_connect() function in the drivers/hv/connection.c module – Microsoft Hyper-V guest mode support driver for Linux operating systems. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of the vmbusconnect function in the drivers/hv/connection.c module – Microsoft’s Linux-based Hyper-V guest mode driver has a vulnerability that exposes confidential system information due to unprocessed debugging information. Exploitation of this vulnerability could allow an attacke...
The vulnerability of the web interfaces of IBM OpenPages and IBM OpenPages with Watson allows a hacker to gain access to confidential information.
The vulnerability of the IBM OpenPages and IBM OpenPages with Watson risk management web interfaces is related to improper verification of certificate authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
The vulnerability of SiPass integrated software for security and access control systems lies in the lack of authentication for a critical function, allowing attackers to gain unauthorized access to confidential data.
The vulnerability of SiPass integrated software for security and access control systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to confidential data...
varnish: request smuggling attacks
A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...
The vulnerability of the SAP Financial Consolidation web application lies in the storage of confidential information within a mechanism with no access control. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SAP Financial Consolidation web application relates to the storage of confidential information within a mechanism without access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibili...
varnish: request smuggling attacks
A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...
varnish: request smuggling attacks
A vulnerability was found in Varnish Cache. This vulnerability may allow request smuggling attacks, where a malicious actor can craft seemingly legitimate HTTP requests. This issue could result in an unspecified system caching incorrect content that can expose confidential information...
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to the transmission of confidential information in plaintext, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the transmission of confidential information in plaintext. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...