17606 matches found
CVE-2019-11968
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
EUVD-2026-1763
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing specially crafted images that bypass asset proxy protection...
CVE-2020-7473
In certain situations, all versions of Citrix ShareFile StorageZones aka storage zones Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticated attackers to access the documents and folders of ShareFile users. NOTE: unlike most CVEs, exploitability depends on th...
CVE-2020-7590
A vulnerability has been identified in DCA Vantage Analyzer All versions V4.5 are affected by CVE-2020-7590. In addition, serial numbers 40000 running software V4.4.0 are also affected by CVE-2020-15797. Affected devices use a hard-coded password to protect the onboard database. This could allow ...
CVE-2020-10854
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16161 January 2020...
CVE-2020-10498
CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request...
CVE-2023-50939
IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 275129...
CVE-2023-4106
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks...
CVE-2025-23856
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Odyno Simple Vertical Timeline simple-vertical-timeline allows DOM-Based XSS.This issue affects Simple Vertical Timeline: from n/a through = 0.1...
CVE-2022-38385
IBM Cloud Pak for Security CP4S 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777...
EUVD-2026-1807
Not used...
EUVD-2026-1789
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB...
GHSA-9583-H5HC-X8CW
creationtimestamp| type| source ---|---|--- 2026-01-08 21:03:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115861500887450169 2026-01-10 04:02:20+00:00| seen| Telegram/hIscdD1HJtLSg0SDRbuSjzrqCFMwMv5SX0wjW8Bk7vM6o 2026-01-24 21:24:48+00:00| seen|...
CVE-2025-50334
creationtimestamp| type| source ---|---|--- 2026-01-08 16:42:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860473488145891 2026-01-08 20:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwrl2am6i2a...
EUVD-2026-1484
Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GA4WP: Google Analytics for WordPress: from n/a through 2.10.0...
GHSA-XFRJ-C749-JXXQ
creationtimestamp| type| source ---|---|--- 2026-01-08 15:41:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860235130064905 2026-01-08 17:15:40+00:00| seen| Telegram/KVWOQnBiY3Eem9HhxjtYUT7TdVna0GpQEMRBO0Jx4tvF1fc...
GHSA-C4CH-XW5P-2MVC
creationtimestamp| type| source ---|---|--- 2026-01-08 15:13:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860126536933892 2026-01-08 16:03:29+00:00| seen| Telegram/eK7Ikx8B4zhc3RXJcMY-EZtQzuwPO0YG4YMu0LZCUnsVEJo...
EUVD-2026-1564
Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX...
EUVD-2026-1565
Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm...
CVE-2025-67919
creationtimestamp| type| source ---|---|--- 2026-01-08 10:59:25+00:00| seen| https://gist.github.com/Darkcrai86/1ae580200e97bb963012f305f8abb336 2026-01-08 17:05:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwhpxrw5t2p 2026-01-08 17:14:13+00:00| seen|...