Lucene search
+L

17273 matches found

Positive Technologies
Positive Technologies
added 2025/05/26 12:00 a.m.10 views

PT-2025-22933 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library Assimp version 5.4.3 Description: A vulnerability was found in the Open Asset Import Library Assimp. It has been rated as problematic and affects the SkipSpaces function in the library...

7.8CVSS3.6AI score0.0027EPSS
SaveExploits1References19
OSV
OSV
added 2025/05/25 7:15 p.m.9 views

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

4.4CVSS4.7AI score0.002EPSS
SaveExploits1References5
NVD
NVD
added 2025/05/25 7:15 p.m.15 views

CVE-2025-5154

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

4.6CVSS0.002EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/25 6:31 p.m.24 views

CVE-2025-5154 PhonePe App SQLite Database databases cleartext storage in a file or on disk

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

4.6CVSS3.7AI score0.002EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/05/25 6:31 p.m.40 views

CVE-2025-5154 PhonePe App SQLite Database databases cleartext storage in a file or on disk

A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access ...

4.6CVSS0.002EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/25 6:31 p.m.62 views

CVE-2025-5154

The CVE-2025-5154 entry applies to the PhonePe App (Android) version 25.03.21.0. The vulnerability resides in the SQLite Database component, specifically within app-private data at /data/data/com.phonepe.app/databases/, where sensitive data is stored in plaintext. This cleartext storage allows a ...

4.6CVSS3.8AI score0.002EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/25 12:00 a.m.10 views

PT-2025-22866 · Phonepe · Phonepe App

Name of the Vulnerable Software and Affected Versions: PhonePe App version 25.03.21.0 Description: A problematic issue was found in the PhonePe App, affecting an unknown function of the SQLite Database component. The issue leads to cleartext storage in a file or on disk, requiring local access fo...

4.6CVSS3.3AI score0.002EPSS
SaveExploits1References11
NVD
NVD
added 2025/05/24 5:15 p.m.23 views

CVE-2025-5129

A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexi...

7.3CVSS0.00308EPSS
SaveExploits1References5
OSV
OSV
added 2025/05/24 5:15 p.m.11 views

CVE-2025-5129

A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexi...

6.3CVSS4.8AI score0.00308EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/24 4:31 p.m.125 views

CVE-2025-5129

CVE-2025-5129 pertains to Sangfor aTrust 2.3.10.60 where an uncontrolled search path is caused by a flaw in MSASN1.dll. The vulnerability can be exploited with local access and has high attack complexity; some references indicate that privileges may be required (local and elevated depending on so...

7.3CVSS6.9AI score0.00308EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/24 4:31 p.m.46 views

CVE-2025-5129 Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path

A vulnerability has been found in Sangfor 零信任访问控制系统 aTrust 2.3.10.60 and classified as critical. Affected by this vulnerability is an unknown functionality in the library MSASN1.dll. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexi...

7.3CVSS6.9AI score0.00308EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 11:56 a.m.25 views

CVE-2025-0223

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference...

6.8CVSS6.7AI score0.00356EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.17 views

CVE-2024-34543

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.2AI score0.00132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:34 a.m.15 views

CVE-2024-33848

Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...

6.5CVSS6.5AI score0.0015EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.15 views

CVE-2024-25562

Improper buffer restrictions in some IntelR Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access...

6.6CVSS6.8AI score0.00132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:27 a.m.7 views

CVE-2024-25939

Mirrored regions with different values in 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

6.7CVSS6.3AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:22 a.m.25 views

CVE-2024-25561

Insecure inherited permissions in some IntelR HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00122EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:22 a.m.16 views

CVE-2024-25024

IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430...

5.5CVSS6.2AI score0.0012EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:21 a.m.6 views

CVE-2024-21857

Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS7.1AI score0.00154EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 10:21 a.m.12 views

CVE-2024-21787

Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.1CVSS7.1AI score0.00074EPSS
SaveExploits0References1
Rows per page
Query Builder