7528 matches found
CVE-2025-8447
An improper access control vulnerability was identified in GitHub Enterprise Server that allowed users with access to any repository to retrieve limited code content from another repository by creating a diff between the repositories. To exploit this vulnerability, an attacker needed to know the...
CVE-2025-38677
CVE-2025-38677 is a Linux kernel vulnerability related to F2FS. The issue arises from a corrupted image where a dnode shares the same node id as its inode, causing f2fs_get_dnode_of_data() to compute an invalid data block address and potentially access memory out of bounds. The root cause is trac...
RHSA-2024:2010
creationtimestamp| type| source ---|---|--- 2025-08-30 07:23:44+00:00| seen| Telegram/C0yDYEEbNQ5VnCAFzAZg9ATD9BBfHwWZR3eMVBUrhv12JA 2025-08-30 12:19:53+00:00| seen| Telegram/jeV1P16aLm0VDGF10VyDeX-S9ksNlaVoQqTazUcF70m5U...
CVE-2025-9619
A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...
CVE-2025-9619
CVE-2025-9619 affects E4 Sistemas Mercatus ERP 2.00.019. The vulnerability is due to manipulation of an unknown function in the file /basico/webservice/imprimir-danfe/id/, causing improper control of resource identifiers. Exploitation can be performed remotely. Multiple sources (NVD, Red Hat, CVE...
CVE-2025-9619 E4 Sistemas Mercatus ERP id resource injection
A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...
CVE-2025-9619 E4 Sistemas Mercatus ERP id resource injection
A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...
SUSE: Security Advisory (SUSE-SU-2025:03004-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-35186
Name of the Vulnerable Software and Affected Versions: E4 Sistemas Mercatus ERP version 2.00.019 Description: A security flaw exists in E4 Sistemas Mercatus ERP 2.00.019, involving improper control of resource identifiers due to manipulation of an unknown function within the...
Google Android Information Disclosure Vulnerability (CNVD-2025-19990)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is caused by double encoding of URIs in multiple locations. The vulnerability can be exploited by an attacker to obtain sensitive information...
π Vulners Lookup β augmented CVE reality
Vulners Lookup β augmented CVE reality. Yesterday, VulnCheck unveiled a prototype Chrome/Chromium plugin that highlights CVE identifiers on any website and shows a popup with vulnerability details, including whether the vulnerability is in the VulnCheck KEV an extended CISA KEV. The Vulners team...
CVE-2025-30059
In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection...
CVE-2025-30041
The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...
CVE-2025-30059
Technical details about CVE-2025-30059 are not provided in the connected EUVD entries or the references. Monitor for updates; the current documents do not specify affected versions, root cause specifics, or remediation steps.
CVE-2025-30041 Missing authentication in APIs returning statistical data along with session IDs
The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...
CVE-2025-30041 Missing authentication in APIs returning statistical data along with session IDs
The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...
CVE-2025-30041
CVE-2025-30041 concerns exposure of session identifiers via three CGI script paths: /cgi-bin/CliniNET.prd/utils/userlogstat.pl, /cgi-bin/CliniNET.prd/utils/usrlogstat.pl, and /cgi-bin/CliniNET.prd/utils/dblogstat.pl. The description indicates that these endpoints expose data containing session ID...
CVE-2025-30040 Missing authentication in API returning request logs containing session IDs
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...
CVE-2025-30040
Technical details about CVE-2025-30040 are not publicly available in the provided connected documents. Monitor for updates from official advisories and EUVD entries.
CVE-2025-30040 Missing authentication in API returning request logs containing session IDs
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...