Lucene search
+L

8807 matches found

NVD
NVD
added 2025/12/05 7:15 p.m.6 views

CVE-2025-66577

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can supply X-Forwarded-For or X-Real-IP headers which...

5.3CVSS0.00245EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/12/05 6:34 p.m.8 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS6.6AI score0.00114EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/05 6:18 p.m.27 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS0.00314EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/05 6:18 p.m.7 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS7AI score0.00314EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/05 5:16 p.m.12 views

CVE-2025-66552

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00275EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/05 4:36 p.m.40 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00275EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/05 4:36 p.m.6 views

EUVD-2025-201446

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.1AI score0.00275EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/05 4:36 p.m.15 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.2AI score0.00275EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/05 4:36 p.m.19 views

CVE-2025-66552

CVE-2025-66552 affects Nextcloud Server and Enterprise Server. The issue is due to incorrect path handling with groupfolders, causing the admin_audit app to fail to log all actions on files and folders inside groupfolders. The vulnerability is fixed in Nextcloud Server and Enterprise Server versi...

4.3CVSS6.2AI score0.00275EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/12/05 4:36 p.m.11 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.5AI score0.00275EPSS
SaveExploits0References6
Chainguard
Chainguard
added 2025/12/05 1:28 a.m.18 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s-fips, headlamp, kubernetes-replicator-fips, cert-manager-csi-driver-fips, gobump, ingress-nginx-controller-fips, newrelic-fluent-bit-output, scanner-test-golang-vulnerability-fixed, ctop, supercronic, blob-csi-fips,...

7.5CVSS7.1AI score0.00464EPSS
SaveExploits2
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.10 views

Nextcloud Server 安全漏洞

Nextcloud Server is a Nextcloud server program open-sourced by Nextcloud. A security vulnerability exists in Nextcloud Server that stems from improper handling of group folder paths, which could lead to incomplete logging...

4.3CVSS6.3AI score0.00275EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.9 views

PT-2025-49269

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 30.0.9 Nextcloud Server versions prior to 31.0.1 Description An issue exists in Nextcloud Server and Enterprise Server related to incorrect path handling with groupfolders. This resulted in the admin audit ap...

4.3CVSS6.4AI score0.00275EPSS
SaveExploits0References16
Wolfi
Wolfi
added 2025/12/04 7:47 p.m.31 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, opentofu, kube-bench, pulumi-kubernetes-operator, newrelic-nri-statsd, steampipe, kubeflow-pipelines, secrets-store-csi-driver-provider-azure, kserve-rest-proxy, nvidia-container-toolkit, terraform-provider-random, nri-rabbitmq,...

7.5CVSS7.1AI score0.00464EPSS
SaveExploits2
OSV
OSV
added 2025/12/04 6:15 p.m.6 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

5.5CVSS5.7AI score0.00114EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/04 6:15 p.m.17 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00114EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/04 5:59 p.m.18 views

CVE-2025-9127

CVE-2025-9127 affects PX Enterprise. Multiple connected reports identify a vulnerability where sensitive information may be logged under certain conditions. From the sources, the affected product is PX Enterprise, with local access (CVSSv3.1: AV=L, AC:L, PR:L, UI:N; confidentiality impact HIGH; i...

8.4CVSS6.2AI score0.00114EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/04 5:59 p.m.30 views

CVE-2025-9127 PX Enterprise Improper Sanitization Vulnerability

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00114EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.5 views

Pure Storage PX Enterprise 安全漏洞

Pure Storage PX Enterprise is a data storage software from the US-based Pure Storage. A security vulnerability exists in Pure Storage PX Enterprise that stems from the possibility of logging sensitive information under certain conditions...

8.4CVSS6.5AI score0.00114EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.15 views

PT-2025-49111

Name of the Vulnerable Software and Affected Versions PX Enterprise affected versions not specified Description A flaw exists in PX Enterprise that could lead to the logging of sensitive information under certain circumstances. Approximately 10,000 devices worldwide may be affected. There are no...

8.4CVSS5.3AI score0.00114EPSS
SaveExploits0References5
Rows per page
Query Builder