17278 matches found
CVE-2019-19314
GitLab EE 8.4 through 12.5, 12.4.3, and 12.3.6 stored several tokens in plaintext...
CVE-2019-1020003
invenio-records before 1.2.2 allows XSS...
CVE-2019-0353
Under certain conditions SAP Business One client B1ONHANA, SAP-M-BO, before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted...
CVE-2019-5237
Huawei PCManager with the versions before 9.0.1.66 Oversea and versions before 9.0.1.70 China have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information...
CVE-2018-19326
Zyxel VMG1312-B10D devices before 5.13AAXA.8C0 allow ../ Directory Traversal, as demonstrated by reading /etc/passwd...
CVE-2018-20946
cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...
CVE-2018-15555
On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers...
CVE-2013-0507
IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability...
CVE-2019-1116
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-110...
CVE-2019-10596
u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking ...
CVE-2019-0950
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-0949, CVE-2019-0951...
CVE-2025-3480
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this...
CVE-2025-3480
CVE-2025-3480 affects MedDream WEB DICOM Viewer. The issue is cleartext transmission of credentials through the Web Portal, enabling network-adjacent attackers to disclose credentials without authentication. Multiple sources (e.g., ZDI-25-246) corroborate a credentials disclosure vulnerability in...
CVE-2015-10048
A vulnerability was found in bmattoso desafiobuzzwoody. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identifier of the patch is cb8220cbae06082c969b1776fcb2fdafb3a1006b. It is recommended to apply a patch to fix this issue...
PT-2025-22538 · Unknown · Nexus Series +2
Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to one way hash with predictable salt vulnerabilities in ASPECT, which may expose sensitive information...
CVE-2025-47947
No description is available for this CVE...
CVE-2025-34025
creationtimestamp| type| source ---|---|--- 2025-05-21 22:41:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17208 2025-05-21 23:25:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114548404428327018 2025-05-22 01:24:12+00:00| seen|...
CVE-2025-5050
creationtimestamp| type| source ---|---|--- 2025-05-21 22:14:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lppmrnyftj2s...