Lucene search
+L

21159 matches found

EUVD
EUVD
•added 2025/10/31 12:30 p.m.•12 views

EUVD-2025-37341

Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...

4.3CVSS6.4AI score0.00209EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/31 11:42 a.m.•47 views

CVE-2025-64351 WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...

4.3CVSS0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/31 11:42 a.m.•7 views

CVE-2025-64351 WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through = 1.0.252.1...

4.3CVSS6.5AI score0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/31 11:42 a.m.•29 views

CVE-2025-64351

The CVE-2025-64351 entry concerns the WordPress Rank Math SEO plugin (

4.3CVSS6.5AI score0.00209EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/31 11:01 a.m.•22 views

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

0.00448EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/31 11:01 a.m.•37 views

CVE-2025-40603

SonicWall SMA100 Series appliances (specifically models SMA 210, 410, and 500v ) are vulnerable to a potential exposure of sensitive information within log files . Under certain conditions, a remote, authenticated administrator may be able to view partial user credential data . While no active ex...

5.8AI score0.00448EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/31 11:01 a.m.•9 views

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

5.8AI score0.00448EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/31 8:54 a.m.•22 views

CVE-2025-30191

Malicious content from E-Mail can be used to perform a redressing attack. Users can be tricked to perform unintended actions or provide sensitive information to a third party which would enable further threats. Attribute values containing HTML fragments are now denied by the sanitization procedur...

5.4CVSS0.00181EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/31 8:48 a.m.•18 views

CVE-2025-62232 Apache APISIX: basic-auth logs plaintext credentials at info level

Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG. This creates a high risk of credential compromise through log access. It has been fixed in the following commit: ...

7.5CVSS5.8AI score
SaveExploits0References4
Patchstack
Patchstack
•added 2025/10/31 3:13 a.m.•14 views

WordPress Analytify Pro plugin <= 7.0.3 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by WPBrigade Support in WordPress Plugin Analytify Pro versions = 7.0.3...

5.3CVSS6.7AI score0.00255EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/31 12:13 a.m.•14 views

CVE-2025-61119

Kanova Android App version 1.0.27 package name com.karelane, developed by Karely L.L.C., contains improper access control vulnerabilities. Attackers may gain unauthorized access to user details and obtain group information, including entry codes, by manipulating API request parameters. Successful...

7.5CVSS7AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/31 12:00 a.m.•0 views

CVE-2025-64168: Concurrent Execution using Shared Resource with Improper Synchronization

Agno is a multi-agent framework, runtime and control plane. From 2.0.0 to before 2.2.2, under high concurrency, when sessionstate is passed to Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may...

7.1CVSS5.7AI score0.0015EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•11 views

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7AI score0.02446EPSS
SaveExploits0References8Affected Software3
Packet Storm News
Packet Storm News
•added 2025/10/31 12:00 a.m.•12 views

Prevalence of Security and Privacy Risk-Inducing Usage of AI-Based Conversational Agents

Recent improvement gains in large language models LLMs have lead to everyday usage of AI-based Conversational Agents CAs. At the same time, LLMs are vulnerable to an array of threats, including jailbreaks and, for example, causing remote code execution when fed specific inputs. As a result, users...

7.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•19 views

SonicWall SMA100 Series 安全漏洞

SonicWall SMA100 Series is a security gateway appliance from SonicWall, Inc. A security vulnerability exists in the SonicWall SMA100 Series that stems from the potential exposure of sensitive information in log files, which could result in a remote authenticated administrator viewing some user...

4.5CVSS4.7AI score0.00448EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/10/31 12:00 a.m.•13 views

WordPress Plugin Publitio Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress plugin Publitio, which can be...

7.5CVSS6AI score0.00247EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•13 views

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

9.1CVSS6.9AI score0.02464EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•13 views

The vulnerability of the nfs_lookupreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfslookupreply function in the net/nfs.c component of the U-Boot loader is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.2AI score0.02136EPSS
SaveExploits0References8Affected Software3
CNNVD
CNNVD
•added 2025/10/31 12:00 a.m.•13 views

WordPress plugin Rank Math SEO 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Rank Math SEO.The...

4.3CVSS5.7AI score0.00209EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/31 12:00 a.m.•16 views

The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.4AI score0.02446EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder