Lucene search
+L

13305 matches found

BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•18 views

The vulnerability of Zoom’s video conferencing software, related to pointer swapping errors, allows a hacker to perform a denial-of-service attack.

The vulnerability of Zoom’s video conferencing software is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to perform a denial-of-service attack...

6.8CVSS5.8AI score0.00552EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/09/01 12:00 a.m.•21 views

The vulnerability of Synology Media Server, which allows a hacker to cause a service failure.

The vulnerability of Synology Media Server is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS5.8AI score0.00368EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•27 views

The vulnerability of the “Load Configuration from Local PC” component of the web interface of the microprogramming software for routing and switching platforms RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to compromise the integrity of protected information.

The vulnerability of the “Load Configuration from Local PC” web interface component of the microprogramming software platform for routing and switching devices, RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Serie...

4.9CVSS5.8AI score0.00286EPSS
SaveExploits0References2Affected Software41
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/28 2:53 p.m.•7 views

Malicious code in @rbacore/errors (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
osv-mal
osv-mal
•added 2025/08/28 2:53 p.m.•4 views

MAL-2025-41918 Malicious code in @rbacore/errors (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/08/28 11:00 a.m.•14 views

Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them

Every day, businesses, teams, and project managers trust platforms like Trello, Asana, etc., to collaborate and manage tasks. But what happens when that trust is broken? According to a recent report by Statista, the average cost of a data breach worldwide was about $4.88 million. Also, in 2024, t...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2025/08/28 12:00 a.m.•21 views

Google Android elevation of privilege vulnerability (CNVD-2025-19982)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

7.8CVSS7.6AI score0.00099EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•19 views

IBM Security Verify Governance Identity Manager 安全漏洞

IBM Security Verify Governance Identity Manager is IBM's identity governance and management solution for centralized management of enterprise user identities and access rights. An information disclosure vulnerability exists in IBM Security Verify Governance Identity Manager 10.0.2, which stems fr...

7.5CVSS6AI score0.00337EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•21 views

The vulnerability of the URL address line in Mozilla Firefox allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Mozilla Firefox browser’s address bar is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

5CVSS5.8AI score0.00287EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•16 views

The vulnerability of the SNMPv3 component in Cisco IOS and IOS XE operating systems allows attackers to compromise the integrity of protected information.

The vulnerability of the SNMPv3 component in Cisco IOS and IOS XE operating systems is related to configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information from a remote location...

4.3CVSS5.8AI score0.00411EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•16 views

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

8.6CVSS6.1AI score0.00619EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•14 views

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.8CVSS6.1AI score0.00715EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•20 views

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.6CVSS6.1AI score0.00775EPSS
SaveExploits0References2Affected Software2
Snyk
Snyk
•added 2025/08/26 4:19 p.m.•7 views

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the process of logging error details during SQL query execution. An attacker can obtain sensitive information by intentionally causing SQL errors and subsequently accessing the log...

7.4CVSS7.2AI score0.00416EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/08/26 4:19 p.m.•26 views

traQ Allows Insertion of Sensitive Information into Log File

Impact A vulnerability exists where sensitive information, such as OAuth tokens, is recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an SQL error by methods such as placing a high load on the database. This could allow an...

5.9CVSS6.8AI score0.00416EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2025/08/26 4:15 p.m.•69 views

CVE-2025-57813

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

5.9CVSS0.00416EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/26 4:06 p.m.•71 views

CVE-2025-57813 Insertion of Sensitive Information into Log File in github.com/traPtitech/traQ

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

5.9CVSS0.00416EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/26 4:06 p.m.•38 views

CVE-2025-57813 Insertion of Sensitive Information into Log File in github.com/traPtitech/traQ

traQ is a messenger application built for Digital Creators Club traP. Prior to version 3.25.0, a vulnerability exists where sensitive information, such as OAuth tokens, are recorded in log files when an error occurs during the execution of an SQL query. An attacker could intentionally trigger an...

5.9CVSS7AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/26 12:00 a.m.•19 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused due to logic error code in multiple locations. The vulnerability can be exploited by an attacker to gain elevated privileges on the system...

7.8CVSS7.5AI score0.00099EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-9852

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display...

5.3CVSS6.4AI score0.02157EPSS
SaveExploits0References2
Rows per page
Query Builder