The vulnerability of the PKI Vault platform for archiving corporate information, including HashiCorp Vault Community Edition and Vault Enterprise, allows a perpetrator to disclose confidential information.

The vulnerability of the PKI Vault platform, which is used for archiving corporate information, in HashiCorp Vault Community Edition and Vault Enterprise, stems from insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose...

K000161987: Golang vulnerability CVE-2025-47907

Security Advisory Description Cancelling a query e.g. by cancelling the context passed to one of the query methods during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may...

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-24816 An Improper Access Control vulnerability in Nokia MantaRay NM

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

CVE-2025-24816

Technical details about CVE-2025-24816 are not publicly available in the provided documents; monitor for updates from Nokia and vulnerability databases.

CVE-2025-24816

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges...

The vulnerability of the drm_edid_get_panel_id() function in the drivers/gpu/drm/drm_edid.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux kernel allows a malicious actor to access protected information or cause service failure.

The vulnerability of the drmedidgetpanelid function in the drivers/gpu/drm/drmedid.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to access protected information or cause servi...

ROS-20260626-73-0041

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and accessibility of the protected...

ROS-20260617-73-0021

The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

ROS-20260617-73-0027

The vulnerability of the msl.c component in the console-based image editing tool ImageMagick is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service interruptions...

ROS-20260617-73-0022

The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

CVE-2026-2401

CWE-532 Insertion of Sensitive Information into Log File vulnerability exists that could cause confidential information to be exposed when a Web Admin user executes a malicious file provided by an attacker...

CVE-2026-34296

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2024-36315

Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality...

CVE-2026-45679

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, OBI exports raw Redis error text as the span status message. Because Redis error replies can contain attacker-controlled or sensitive values, this behavior can exfiltrate...

Authorization Bypass Through User-Controlled Key

Overview praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the IssueService.get, update, and delete functions, which do not verify workspace ownershi...

ROS-20260529-73-0020

The vulnerability of the cURL command-line utility lies in the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the JavaScript Engine component in Mozilla Firefox browsers and the Thunderbird email client allows attackers to compromise the confidentiality of protected information.

The vulnerability of the JavaScript Engine component in Mozilla Firefox browsers and the Thunderbird email client is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of protected information...

ROS-20260514-73-0204

The vulnerability of the phpreadstreamallchunks function in the PHP programming language is related to the possibility of speculative execution of commands. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the msl.c component in the console-based image editing tool ImageMagick allows a hacker to access confidential data or cause service interruptions.

The vulnerability of the msl.c component in the console-based image editing tool ImageMagick is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service interruptions...