The vulnerability of the system-mounted authentication module in Synology DiskStation Manager (DSM) is related to errors in the certificate validation process, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the system-mounted authentication module in the Synology DiskStation Manager DSM is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ocfs2_rename() function in the fs/ocfs2/namei.c module of the OCFS2 file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ocfs2rename function in the fs/ocfs2/namei.c module of the OCFS2 file system support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of Synology Media Server, which allows a hacker to cause a service failure.

The vulnerability of Synology Media Server is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the “Load Configuration from Local PC” component of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to compromise the integrity of protected information.

The vulnerability of the “Load Configuration from Local PC” web interface component of the microprogramming software platform for routing and switching devices, RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Serie...

MAL-2025-41918 Malicious code in @rbacore/errors (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @rbacore/errors (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them

Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust is broken? According to a recent report by Statista, the average cost of a data breach worldwide was about $4.88 million. Also, in 2024, t...

IBM Security Verify Governance Identity Manager 安全漏洞

IBM Security Verify Governance Identity Manager is IBM's identity governance and management solution for centralized management of enterprise user identities and access rights. An information disclosure vulnerability exists in IBM Security Verify Governance Identity Manager 10.0.2, which stems fr...

Google Android elevation of privilege vulnerability (CNVD-2025-19982)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

The vulnerability of the SNMPv3 component in Cisco IOS and IOS XE operating systems allows attackers to compromise the integrity of protected information.

The vulnerability of the SNMPv3 component in Cisco IOS and IOS XE operating systems is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information from a remote location...

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the URL address line in Mozilla Firefox allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Mozilla Firefox browser’s address bar is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the process of logging error details during SQL query execution. An attacker can obtain sensitive information by intentionally causing SQL errors and subsequently accessing the log...

traQ Allows Insertion of Sensitive Information into Log File

Impact A vulnerability exists where sensitive information, such as OAuth tokens, is recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an SQL error by methods such as placing a high load on the database. This could allow an...

CVE-2025-57813

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

CVE-2025-57813 Insertion of Sensitive Information into Log File in github.com/traPtitech/traQ

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

CVE-2025-57813 Insertion of Sensitive Information into Log File in github.com/traPtitech/traQ

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...