19850 matches found
The vulnerability of the Cisco IOS XE operating system, which allows a perpetrator to access confidential information
The vulnerability of the Cisco IOS XE operating system is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
The vulnerability of the DICOM image processing tool Grassroots DiCoM allows a malicious individual to gain access to confidential data or cause service interruptions.
The vulnerability of the DICOM image processing tool Grassroots DiCoM lies in its ability to read data beyond the acceptable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data or cause service failures by using a specially created DICOM...
PT-2026-40775
Exposed Keycloak management service in the Arqit Symmetric Key Agreement Platform enables unauthorized access to sensitive debug information such as metrics and health data. This issue affects Symmetric Key Agreement Platform: before 26.03...
ShellHub 安全漏洞
ShellHub is an open-source remote device access and management platform developed by ShellHub. Versions of ShellHub prior to 0.24.2 contained security vulnerabilities. These vulnerabilities stemmed from the GET /api/devices/:uid request, which returned the complete device object for any...
SQLBot 安全漏洞
SQLBot is an intelligent data querying system developed by DataEase, based on large models and RAG techniques. Versions of SQLBot prior to 1.8.0 contained security vulnerabilities. These vulnerabilities stemmed from cross-workpace IDOR and authorization bypasses in the...
The vulnerability of the library that accesses HTTP servers via LibSoup allows a perpetrator to gain access to confidential data or cause service failures.
The vulnerability of the LibSoup library for HTTP servers is related to a countable loss of significance. Exploiting this vulnerability could allow an attacker to gain access to confidential data or cause service failures...
PT-2026-40823
Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.104.3 ERPNext versions prior to 16.14.0 Description Certain endpoints are susceptible to SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution, allowing an attacker ...
Linux Distros Unpatched Vulnerability : CVE-2025-35979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX...
PT-2026-40558
The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get sponsored meta AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract data from password...
PT-2026-40604
qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. This vulnerability allows attackers to access sensitive database information, including users' Personally Identifiable Information PII...
The vulnerability of the Ruby programming language’s URI module, the RubyGems package manager, allows attackers to gain access to confidential data.
The vulnerability of the Ruby language’s URI module, as well as the RubyGems package manager system, relates to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
The vulnerabilities in the Firefox ESR and Firefox web browsers, as well as the Thunderbird email client, allow attackers to gain access to confidential data or cause service interruptions.
The vulnerabilities in the Firefox ESR and Firefox web browsers, as well as the Thunderbird email client, involve exploiting authentication vulnerabilities through phising techniques. Exploiting these vulnerabilities can allow a malicious actor to gain access to confidential data or cause service...
CVE-2026-44341
GoJobs is a REST API for a Job Board platform. The application exposes a job retrieval endpoint that allows unauthenticated users to access job details by directly manipulating object identifiers. The endpoint lacks proper authentication and authorization checks, resulting in unauthorized access ...
CVE-2026-26289
PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricted to administrative permissions only...
CVE-2026-44874
The CVE 2026-44874 affects the web-based management interface of an AOS-10 Gateway. It enables an authenticated remote attacker to access sensitive files on the underlying operating system, leading to disclosure of confidential information and potentially enabling further attacks on the affected ...
EUVD-2026-29655
Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-29523
Out-of-bounds read for the IntelR Data Center Graphics Driver for VMware ESXi software before version 2.0.2 within Ring 1: Device Drivers may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...
EUVD-2025-209791
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...