Lucene search
+L

8942 matches found

CNVD
CNVD
added 2025/04/30 12:0 a.m.7 views

Unspecified Vulnerability in Tenable Network Security Nessus

Tenable Network Security Nessus is a network vulnerability scanning tool developed by Tenable Network Security to detect security vulnerabilities and configuration errors in operating systems, network devices, and applications. Tenable Network Security Nessus contains a security vulnerability tha...

4.3CVSS7AI score0.00276EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/30 12:0 a.m.9 views

JetBrains TeamCity Path Traversal Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A path traversal vulnerability exists in JetBrains...

9.8CVSS6.4AI score0.00523EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/04/29 7:2 p.m.257 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433Erlang-OTP This script is a custom security too...

10CVSS8.7AI score0.98594EPSS
SaveExploits38
NVD
NVD
added 2025/04/29 6:15 p.m.28 views

CVE-2025-3911

Recording of environment variables, configured for running containers, in Docker Desktop application logs could lead to unintentional disclosure of sensitive information such as api keys, passwords, etc. A malicious actor with read access to these logs could obtain sensitive credentials informati...

5.2CVSS0.00155EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/04/29 2:56 p.m.9 views

SUSE CVE-2025-46327

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...

6.3CVSS6.5AI score0.00126EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2025/04/29 2:15 p.m.33 views

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability affects Firefox 138 and Thunderbird 138...

5.3CVSS6.6AI score0.00313EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/29 2:15 p.m.20 views

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

5.3CVSS0.00313EPSS
SaveExploits0References3
CVE
CVE
added 2025/04/29 1:13 p.m.82 views

CVE-2025-4090

CVE-2025-4090 affects Thunderbird for Android and Firefox/Thunderbird before version 138 (Thunderbird <138; Firefox

5.3CVSS5.8AI score0.00313EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
added 2025/04/29 1:13 p.m.39 views

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

5.3CVSS4.5AI score0.00313EPSS
SaveExploits0
NVD
NVD
added 2025/04/29 5:15 a.m.29 views

CVE-2025-46329

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage durin...

3.3CVSS0.00114EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/29 4:35 a.m.68 views

CVE-2025-46329

The CVE-2025-46329 issue affects libsnowflakeclient (Snowflake Connector for C/C++). Versions 0.5.0 through before 2.2.0 log locally the client-side encryption master key of the target stage when the logging level is DEBUG during GET/PUT operations. This could expose sensitive information in loca...

3.3CVSS3.9AI score0.00114EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/04/29 4:35 a.m.8 views

CVE-2025-46329 Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, are vulnerable to local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the target stage durin...

3.3CVSS6.5AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:8 a.m.23 views

Security Bulletin: A vulnerability in IBM Spectrum Scale could allow a local attacker to bypass the filesystem audit logging (CVE-2021-29671)

Summary A security vulnerability has been identified in IBM Spectrum Scale FAL that could allow a local attacker to bypass the FAL mechanism. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2021-29671 DESCRIPTION: IBM Spectrum Scale could allow a local attacker to bypas...

4CVSS3.6AI score0.00231EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/04/29 12:0 a.m.7 views

PT-2025-18133 · Snowflake · Libsnowflakeclient

Name of the Vulnerable Software and Affected Versions: libsnowflakeclient versions 0.5.0 through 2.2.0 Description: The issue concerns local logging of sensitive information. When the logging level was set to DEBUG, the Connector would log locally the client-side encryption master key of the targ...

3.3CVSS6.2AI score0.00114EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/04/29 12:0 a.m.12 views

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 138, which stems from the possibility that Firefox for Android may log the location of sensitive libraries via Logcat...

5.3CVSS4.1AI score0.00313EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/29 12:0 a.m.6 views

Docker Desktop 安全漏洞

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

5.2CVSS6.3AI score0.00155EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/29 12:0 a.m.13 views

PT-2025-18159

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 138 Thunderbird versions prior to 138 Description A vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat. Recommendations For Firefox versions prior to 138,...

10CVSS8.8AI score0.09348EPSS
SaveExploits0References246
OSV
OSV
added 2025/04/28 11:15 p.m.15 views

AZL-61501 CVE-2025-46327 affecting package telegraf 1.29.4-21

gosnowflake is the Snowflake Golang driver. Versions starting from 1.7.0 to before 1.13.3, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Driver reads logging configuration from a user-provided file. On Linux and...

7CVSS7.2AI score0.00126EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/28 11:15 p.m.33 views

CVE-2025-46326

snowflake-connector-net is the Snowflake Connector for .NET. Versions starting from 2.1.2 to before 4.4.1, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the Connector reads logging configuration from a user-provided...

7CVSS0.00154EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/28 11:15 p.m.27 views

CVE-2025-46328

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided...

7CVSS0.00161EPSS
SaveExploits0References2
Rows per page
Query Builder