21169 matches found
EUVD-2025-34105
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database...
EUVD-2025-34106
SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary data from the database...
CVE-2025-42903 User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management
A vulnerability in SAP Financial Service Claims Management RFC function ICLUSERGETNAMEANDADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability...
CVE-2025-42903 User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management
A vulnerability in SAP Financial Service Claims Management RFC function ICLUSERGETNAMEANDADDRESS allows user enumeration and potential disclosure of personal data through response discrepancies, causing low impact on confidentiality with no impact on integrity or availability...
CVE-2025-42903
CVE-2025-42903 pertains to SAP Financial Service Claims Management via the RFC function ICL_USER_GET_NAME_AND_ADDRESS. The issue allows user enumeration and potential disclosure of personal data due to response discrepancies, with low confidentiality impact and no impact to integrity or availabil...
PT-2025-41848
Name of the Vulnerable Software and Affected Versions SureForms – Drag and Drop Form Builder for WordPress versions prior to 1.12.2 Description The SureForms – Drag and Drop Form Builder for WordPress plugin contains a flaw in access control. Specifically, the...
Microsoft Windows Routing and Remote Access Service 缓冲区错误漏洞
Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A buffer error vulnerability exists in Microsoft Windows Routing and Remote...
PT-2025-42080
Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description An issue exists in Windows Failover Cluster that allows an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to an...
PT-2025-41911
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A Stored Cross-Site Scripting issue exists that could allow a malicious user to view and modify sensitive data or make the webpage unavailable. The issue is due...
Microsoft Windows WLAN AutoConfig Service 缓冲区错误漏洞
Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Windows Vista+ operating systems from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows WLAN AutoConfig Service, which can be exploited by an attacker to obtain sensiti...
PT-2025-41967
Name of the Vulnerable Software and Affected Versions Fortinet FortiADC versions 7.4.0, 7.2.3 and below, 7.1.4 and below, 7.0 all versions, 6.2 all versions Description An issue exists in Fortinet FortiADC that may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPS...
PT-2025-42021
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Cloud Files Mini Filter Driver that could allow an authorized attacker to disclose information locally. The issue involves the exposure of sensitive information to ...
PT-2025-42137
Name of the Vulnerable Software and Affected Versions Microsoft Failover Cluster Virtual Driver affected versions not specified Description An issue exists in Microsoft Failover Cluster Virtual Driver that allows an authorized attacker to disclose information locally. The issue involves the...
PT-2025-41838
Name of the Vulnerable Software and Affected Versions SAP Financial Service Claims Management affected versions not specified Description An issue in the RFC function ICL USER GET NAME AND ADDRESS within SAP Financial Service Claims Management allows for user enumeration and potential disclosure ...
Microsoft Windows Cryptographic Services 安全漏洞
Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services, which can be exploited by an attacker to obtain sensitive information...
CVE-2025-62386
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the oidc/saml login flows. An attacker can access sensitive information by sending crafted requests to the exposed interface. Remediation Upgrade...
CVE-2025-62362
CVE-2025-62362 affects gpp-burgerportaal, a Dutch government citizen portal. In versions prior to 2.0.3, 3.0.2, and 4.0.1, the name and email address of employees who publish content are exposed in network responses and can be discovered via browser developer tools. This is an information disclos...
CVE-2025-62251
Summary: CVE-2025-62251 affects Liferay Portal and Liferay DXP. The root cause is the Menu Display Widget exposing content to users without view permissions, enabling potential exposure of sensitive information. Affected versions: Liferay Portal 7.3.0–7.4.3.119 and Liferay DXP 2023.Q3.1–2023.Q3.8...