CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

276 matches found

Cvelist•added 2025/12/04 8:4 p.m.•22 views

CVE-2025-12996

Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025...

4.1CVSS0.00095EPSS

Exploits0References1

Positive Technologies•added 2025/12/04 12:0 a.m.•9 views

PT-2025-49126

Name of the Vulnerable Software and Affected Versions Medtronic CareLink Network versions prior to December 4, 2025 Description A local attacker gaining access to log files on an internal API server can view passwords in plaintext due to errors logged under specific conditions. Recommendations...

4.1CVSS6.3AI score0.00095EPSS

Exploits0References4

NVD•added 2025/10/31 9:15 a.m.•10 views

CVE-2025-62232

Sensitive data exposure via logging in basic-auth leads to plaintext usernames and passwords written to error logs and forwarded to log sinks when log level is INFO/DEBUG. This creates a high risk of credential compromise through log access. It has been fixed in the following commit: ...

7.5CVSS0.00434EPSS

Exploits0References2

OSV•added 2025/10/31 8:48 a.m.•6 views

CVE-2025-62232 Apache APISIX: basic-auth logs plaintext credentials at info level

7.5CVSS5.8AI score0.00434EPSS

Exploits0References4

CNNVD•added 2025/10/31 12:0 a.m.•5 views

Apache Apisix 安全漏洞

Apache Apisix is a cloud-native microservices API gateway service from the Apache USA Foundation. The software is implemented based on OpenResty and etcd, with dynamic routing and plugin hot loading, suitable for API management under the microservices system. A security vulnerability exists in...

7.5CVSS6.4AI score0.00434EPSS

Exploits0References3