22225 matches found
CVE-2025-63353
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...
EUVD-2025-50823
Parse Server allows public explain queries which may expose sensitive database performance information and schema details...
GHSA-7CX5-254X-CGRQ Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
PT-2025-46919
Name of the Vulnerable Software and Affected Versions Radarr version 5.28.0.10274 Description A security issue exists in Radarr version 5.28.0.10274 related to incorrect default permissions. This issue stems from manipulation of an unknown function within the file...
Sonarr 安全漏洞
Sonarr is a software from Sonarr that helps find, download and organize TV shows. A security vulnerability exists in Sonarr version 4.0.15.2940 that stems from improperly set default permissions and could lead to a local environment attack...
PT-2025-46920
Name of the Vulnerable Software and Affected Versions Sonarr version 4.0.15.2940 Description A security issue exists in Sonarr that involves incorrect default permissions. The issue is related to an unknown function within the file C:ProgramDataSonarrbinSonarr.Console.exe of the Service component...
About the security content of Compressor 4.11.1
About the security content of Compressor 4.11.1 This document describes the security content of Compressor 4.11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...
Siemens SIMATIC S7-1500 Improper Restriction of XML External Entity Reference (CVE-2017-7375)
A flaw in libxml2 allows remote XML entity inclusion with default parser flags i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes. Depending on the context, this may expose a higher- risk attack surface in libxml2 not...
Radarr 安全漏洞
Radarr is a movie management software from Radarr Open Source. A security vulnerability exists in Radarr version 5.28.0.10274, which stems from improperly set default permissions and could lead to a local environment attack...
Siemens SIMATIC S7-1500 Initialization of a Resource with an Insecure Default (CVE-2024-56433)
shadow-utils aka shadow 4.4 through 4.17.0 establishes a default /etc/subuid behavior e.g., uid 100000 through 165535 for the first user account that can realistically conflict with the uids of users defined on locally administered networks, potentially leading to account takeover, e.g., by...
GHSA-C978-WQ47-PVVW sudo-rs: Partial password reveal is possible after timeout
Summary If a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered are echoed back to the console. Example Using sudo-rs: geiger@cerberus:$ sudo -s sudo: authenticate Password: sudo-rs:...
CVE-2025-8421
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...
CVE-2025-8421
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...
CVE-2025-8421
An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges...
CVE-2025-8421
CVE-2025-8421 concerns Lenovo Dock Manager. The issue is described as an improper default-permission flaw during installation that could let an authenticated local user redirect log files with elevated privileges. Public sources (NVD/Red Hat/CIRCL, etc.) reiterate this, with CVSS indicators (4.0/...
EUVD-2025-131925
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...
CVE-2025-27711
Incorrect default permissions for some IntelR One Boot Flash Update IntelR OFU software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable...
CVE-2025-31940
Incorrect default permissions for some IntelR Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...
CVE-2025-63353
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...
CVE-2025-63353
A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an...