1165 matches found
CVE-2025-10222
The CVE-2025-10222 affects AxxonSoft Axxon One VMS (C-Werk) versions 2.0.0–2.0.1 on Windows, via the diagnostic dump component. The root cause is exposure of licensing-related information (timestamps, license states, registry values) through diagnostic export files generated by the built-in troub...
CVE-2025-10222 Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS
Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the diagnostic dump component in AxxonSoft Axxon One VMS C-Werk 2.0.0 through 2.0.1 on Windows allows a local attacker to obtain licensing-related information such as timestamps, license states, and registry values via reading...
PT-2025-37040
Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One VMS versions 2.0.0 through 2.0.1 Description: The diagnostic dump component in AxxonSoft Axxon One VMS contains a flaw that allows a local attacker to obtain licensing-related information, such as timestamps, license state...
Security Bulletin: Vulnerabilities in dependencies affect IBM Common Licensing
Summary Security Vulnerabilities in dependencies affect IBM Common Licensing. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2024-38820 DESCRIPTION: The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase ha...
Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs
Summary Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition in IBM License Key Server Administration and Reporting Tool ART and Administration Agent. This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their July 2025...
Node.js ReadFileUtf8 DoS
The vulnerability of the ReadFileUtf8 function in the Node.js software licensing model is related to the lack of memory release after its effective lifespan. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Node.js ThrowException DoS
The vulnerability of the ThrowException function in the Node.js software licensing model is related to an error in handling exceptional states during the processing of the SignTraits::DeriveBits method. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...
August 26, 2025—KB5063842 (OS Build 19045.6282) Preview
None None...
Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses
Google said it's implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to "ensure a safe and compliant ecosystem for users." The policy applies to markets like Bahrain, Canada, Hong...
Siemens TIA Administrator Access Control Error Vulnerability
Siemens TIA Administrator is a management program for authorizing and licensing SIMATIC products from Siemens, Germany. An access control error vulnerability exists in Siemens TIA Administrator that can be exploited by an attacker to cause elevation of privilege and arbitrary code execution...
Remote Desktop Licensing Service RCE
The vulnerability of the Remote Desktop Licensing Service for Windows operating systems stems from the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
CVE-2025-48814
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-48814
Technical details about CVE-2025-48814 (affected product/version, exploit specifics, and remediation) are not provided in the connected documents. Monitor official updates from Microsoft/NVD for concrete details and fixes.
Remote Desktop Licensing Service Security Feature Bypass Vulnerability
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-48814: Missing Authentication for Critical Function
Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network...
Microsoft Windows Remote Desktop Licensing Service Access Control Vulnerability
Microsoft Windows Remote Desktop Licensing Service is an authorization license from Microsoft Corporation USA that manages and authenticates remote desktop connections. An access control error vulnerability exists in Microsoft Windows Remote Desktop Licensing Service. An attacker could bypass...
PT-2025-28545 · Microsoft · Windows Remote Desktop Licensing Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue concerns missing authentication for a critical function in the Windows Remote Desktop Licensing Service, allowing an unauthorized attacker to bypa...
Security Bulletin: IBM Common Licensing using IBM® SDK, Java™ Technology Edition vulnerable to CVEs
Summary Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition in IBM License Key Server Administration and Reporting Tool ART and Administration Agent. This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their April 202...
VulnCheck KEV: CVE-2024-20440
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected...
