Lucene search
K

1032 matches found

RedhatCVE
RedhatCVE
added 2025/04/30 12:17 a.m.16 views

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

9.8CVSS7.1AI score0.00134EPSS
Exploits0References6
Circl
Circl
added 2025/04/29 4:12 p.m.5 views

CVE-2025-4070

creationtimestamp| type| source ---|---|--- 2025-04-29 16:12:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13851 2025-04-29 19:02:24+00:00| published-proof-of-concept| Telegram/obajfcGkagyaYelipu27ZjZPzm4H6vLGDNzjCH6Suk5ZZs 2025-04-29 19:20:29+00:00| seen|...

9.8CVSS7.3AI score0.00079EPSS
Exploits1References3
Circl
Circl
added 2025/04/29 5:11 a.m.0 views

CVE-2022-44647

creationtimestamp| type| source ---|---|--- 2025-04-29 05:11:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13774...

5.5CVSS5.5AI score0.0026EPSS
Exploits0References1
OSV
OSV
added 2025/04/28 4:15 p.m.2 views

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

9.8CVSS5.8AI score0.00134EPSS
Exploits0References4
NVD
NVD
added 2025/04/28 4:15 p.m.12 views

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

9.8CVSS0.00134EPSS
Exploits0References4
Circl
Circl
added 2025/04/28 9:40 a.m.6 views

CVE-2024-13688

creationtimestamp| type| source ---|---|--- 2025-04-28 09:40:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxieo5u2b 2025-04-28 09:52:50+00:00| seen| https://t.me/cvedetector/23887...

5.3CVSS8.7AI score0.00063EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/04/28 12:0 a.m.7 views

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

3.5CVSS4.1AI score0.00134EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.2 views

PT-2025-18085 · Devexpress · Devexpress

Name of the Vulnerable Software and Affected Versions: DevExpress versions prior to 23.1.3 Description: The issue concerns a data-source protection mechanism bypass during the deserialization of XML data. This means that the normal protections in place to safeguard data sources can be circumvente...

9.8CVSS6.4AI score0.00134EPSS
Exploits0References9
Cvelist
Cvelist
added 2025/04/28 12:0 a.m.10 views

CVE-2023-35815

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data...

3.5CVSS0.00134EPSS
Exploits0References4
CVE
CVE
added 2025/04/28 12:0 a.m.62 views

CVE-2023-35815

DevExpress before 23.1.3 has a vulnerability where the data-source protection mechanism can be bypassed during XML deserialization. Affected product: DevExpress (pre-23.1.3). Root cause: bypass of data-source protection on XML data. Practical impact (as stated): potential unauthorized access or m...

9.8CVSS7.1AI score0.00134EPSS
Exploits0References4Affected Software1
Circl
Circl
added 2025/04/27 6:10 p.m.6 views

CVE-2025-3980

creationtimestamp| type| source ---|---|--- 2025-04-27 18:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13628 2025-04-27 21:20:12+00:00| seen| https://t.me/cvedetector/23851 2025-04-27 21:40:21+00:00| seen|...

5.3CVSS4.5AI score0.03441EPSS
Exploits1References3
Circl
Circl
added 2025/04/23 9:14 p.m.8 views

CVE-2025-3673

creationtimestamp| type| source ---|---|--- 2025-04-23 21:14:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnj4fc3zvb24...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/23 10:45 a.m.42 views

CVE-2025-3454

This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily...

5CVSS5.6AI score0.00032EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.4 views

Grafana 授权问题漏洞

Grafana is a set of open source monitoring tools from Grafana open source that provides a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. An authorization issue vulnerability exists in Grafana versions prior to 10.4....

5CVSS5.6AI score0.00032EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.4 views

PT-2025-17604

Name of the Vulnerable Software and Affected Versions Grafana version 10.4.0 Description The issue concerns improper authorization in the Data Source Proxy API. Recommendations For Grafana version 10.4.0, update to a version that includes the fix for this issue. At the moment, there is no...

6.8CVSS6.6AI score0.00042EPSS
Exploits0References101
Circl
Circl
added 2025/04/22 9:9 p.m.20 views

CVE-2025-31328

creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln3ulrl2c 2025-04-22 22:35:16+00:00| seen| https://t.me/cvedetector/23541...

4.6CVSS4.8AI score0.00112EPSS
Exploits0References2
Circl
Circl
added 2025/04/14 1:54 p.m.5 views

CVE-2025-32913

creationtimestamp| type| source ---|---|--- 2025-04-14 13:54:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11611 2025-04-14 14:49:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114336869784628007 2025-04-14 16:33:37+00:00| seen|...

7.5CVSS7.3AI score0.00382EPSS
Exploits0References4
Circl
Circl
added 2025/04/08 10:22 p.m.3 views

CVE-2025-30296

creationtimestamp| type| source ---|---|--- 2025-04-08 22:22:26+00:00| seen| https://t.me/cvedetector/22504...

7.8CVSS4.8AI score0.00163EPSS
Exploits0References1
Circl
Circl
added 2025/04/08 5:48 p.m.5 views

CVE-2025-32018

creationtimestamp| type| source ---|---|--- 2025-04-08 17:48:13+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114303598060531170 2025-04-08 19:22:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmd756sgdk2f...

8CVSS5.8AI score0.00258EPSS
Exploits0References2
Citrix
Citrix
added 2025/04/02 12:0 a.m.9 views

Citrix Director - Unable to retrieve the list of Connections

Citrix Director does not show any 'Connection' information under 'Filters'. There is an error displayed in Director: "Data source unresponsive or reported an error. View Director server event logs for further information Refer Citrix KB article CTX130320" You can also find an event ID 5 logged by...

6.8AI score
Exploits0
Rows per page
Query Builder