CVE-2024-54188

creationtimestamp| type| source ---|---|--- 2025-05-22 15:48:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114552270680970829...

CVE-2025-32815

creationtimestamp| type| source ---|---|--- 2025-05-22 15:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114552268477645630 2025-07-13 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lturhz5oen24 2025-07-24 21:02:25+00:00| seen|...

CVE-2025-32813

creationtimestamp| type| source ---|---|--- 2025-05-22 15:48:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114552268477645630 2025-06-04 13:58:39+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114625447148060855 2025-07-07 12:38:11+00:00| confirmed|...

CVE-2020-3918

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information...

CVE-2020-25837

Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset SSPR product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain configurations the vulnerability could disclose sensitive information...

CVE-2020-25248

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter...

CVE-2020-23686

Cross site request forgery CSRF vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts...

CVE-2020-18329

An issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web version v2.2, allows attackers to gain full unauthenticated access to the configuration and service interface...

CVE-2020-15377

Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as Server-Side Request Forgery SSRF...

CVE-2023-47466

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17294 2025-05-22 16:02:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpriikvla22e...

CVE-2025-3111

creationtimestamp| type| source ---|---|--- 2025-05-22 13:44:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17272 2025-05-22 15:42:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lprher3mih2r...

CVE-2018-11966

Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD...

CVE-2025-3836

creationtimestamp| type| source ---|---|--- 2025-05-22 12:42:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114551537185858831 2025-05-22 12:50:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpr5qgtdim2q...

CVE-2016-11081

An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser...

CVE-2013-0651

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request...

CVE-2019-14356

On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found. The power consumption of each row-based display cycle depends on the number of illuminated pixels, allowing a partial recovery of display contents. For example, a hardware implant in the USB cable might be...

CVE-2019-5465

An information disclosure issue was discovered in GitLab CE/EE 8.14 and later, by using the move issue feature which could result in disclosure of the newly created issue ID...

CVE-2019-13264

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After it leaves, the router...

CVE-2019-0382

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

CVE-2019-15685

Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable such product's security features as private browsing and...