Lucene search
+L

8850 matches found

Cvelist
Cvelist
added 2025/12/05 6:18 p.m.28 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS0.00328EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/05 6:18 p.m.8 views

CVE-2025-66570 cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, a vulnerability allows attacker-controlled HTTP headers to influence server-visible metadata, logging, and authorization decisions. An attacker can inject headers named REMOTEADDR, REMOTEPORT,...

10CVSS7AI score
SaveExploits0References4
NVD
NVD
added 2025/12/05 5:16 p.m.12 views

CVE-2025-66552

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00304EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/05 4:36 p.m.15 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.2AI score0.00304EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/05 4:36 p.m.22 views

CVE-2025-66552

CVE-2025-66552 affects Nextcloud Server and Enterprise Server. The issue is due to incorrect path handling with groupfolders, causing the admin_audit app to fail to log all actions on files and folders inside groupfolders. The vulnerability is fixed in Nextcloud Server and Enterprise Server versi...

4.3CVSS6.2AI score0.00304EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/12/05 4:36 p.m.42 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS0.00304EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/05 4:36 p.m.12 views

CVE-2025-66552 Nextcloud Server admin_audit does not log all actions on files in groupfolders

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.5AI score
SaveExploits0References6
EUVD
EUVD
added 2025/12/05 4:36 p.m.6 views

EUVD-2025-201446

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the adminaudit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed ...

4.3CVSS6.1AI score0.00304EPSS
SaveExploits0References4
Chainguard
Chainguard
added 2025/12/05 1:28 a.m.20 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, nri-mysql, minio-operator, crossplane-aws-provider-fips, flannel-cni-plugin, kube-vip, hydra, restic-fips, kapp, kine, kubeflow-fips, secrets-store-csi-driver-provider-gcp-fips, sftpgo-plugin-eventsearch, terraform-provider-tls, aws-nuke,...

7.5CVSS7.5AI score0.00464EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.10 views

PT-2025-49269

Name of the Vulnerable Software and Affected Versions Nextcloud Server versions prior to 30.0.9 Nextcloud Server versions prior to 31.0.1 Description An issue exists in Nextcloud Server and Enterprise Server related to incorrect path handling with groupfolders. This resulted in the admin audit ap...

4.3CVSS6.4AI score0.00304EPSS
SaveExploits0References16
CNNVD
CNNVD
added 2025/12/05 12:0 a.m.10 views

Nextcloud Server 安全漏洞

Nextcloud Server is a Nextcloud server program open-sourced by Nextcloud. A security vulnerability exists in Nextcloud Server that stems from improper handling of group folder paths, which could lead to incomplete logging...

4.3CVSS6.3AI score0.00304EPSS
SaveExploits0References4
Wolfi
Wolfi
added 2025/12/04 7:47 p.m.33 views

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: polaris, rekor, k3d, secrets-store-csi-driver-provider-gcp, steampipe, kots, helm-operator, metrics-server, argocd-image-updater, kafka-proxy, kiali, nvidia-container-toolkit, thanos, otel-cli, kbld, helm-set-status, nri-redis, restic, kube-fluentd-operator,...

7.5CVSS7.5AI score0.00464EPSS
SaveExploits2
NVD
NVD
added 2025/12/04 6:15 p.m.17 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00125EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/04 6:15 p.m.9 views

CVE-2025-9127

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

5.5CVSS5.7AI score0.00125EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/04 5:59 p.m.23 views

CVE-2025-9127

CVE-2025-9127 affects PX Enterprise. Multiple connected reports identify a vulnerability where sensitive information may be logged under certain conditions. From the sources, the affected product is PX Enterprise, with local access (CVSSv3.1: AV=L, AC:L, PR:L, UI:N; confidentiality impact HIGH; i...

8.4CVSS6.2AI score0.00125EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/04 5:59 p.m.40 views

CVE-2025-9127 PX Enterprise Improper Sanitization Vulnerability

A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions...

8.4CVSS0.00125EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.18 views

PT-2025-49111

Name of the Vulnerable Software and Affected Versions PX Enterprise affected versions not specified Description A flaw exists in PX Enterprise that could lead to the logging of sensitive information under certain circumstances. Approximately 10,000 devices worldwide may be affected. There are no...

8.4CVSS5.3AI score0.00125EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2025/12/04 12:0 a.m.16 views

systemd security update

252-55.0.3.7 - serialize: don't allocate 1M on the stack just like that LINUX-16166 - Route logs from container mapped uids to the system journal Orabug: 38135007 - Drop delay when nspawn fails to reset loginuid Orabug: 37793135 - Improve logging for api bus connection and subscribers Orabug:...

4.7CVSS6.9AI score0.00748EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.5 views

Suricata < 7.0.13 / 8.x < 8.0.2 Multiple Vulnerabilities

The version of OISF Suricata installed on the remote host is prior to 7.0.13 or 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities, including: - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata...

7.5CVSS5.5AI score0.00361EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/12/04 12:0 a.m.11 views

Pure Storage PX Enterprise 安全漏洞

Pure Storage PX Enterprise is a data storage software from the US-based Pure Storage. A security vulnerability exists in Pure Storage PX Enterprise that stems from the possibility of logging sensitive information under certain conditions...

8.4CVSS6.5AI score0.00125EPSS
SaveExploits0References1
Rows per page
Query Builder