Lucene search
+L

9724 matches found

RedhatCVE
RedhatCVE
added 2025/05/15 6:13 a.m.25 views

CVE-2025-22246

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs...

3CVSS6.8AI score0.00196EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.8 views

WordPress plugin Connexion Logs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6AI score0.00182EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.13 views

WordPress plugin webtoffee-gdpr-cookie-consent 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/15 12:00 a.m.11 views

PT-2025-21420 · WordPress · The Connexion Logs Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: The Connexion Logs WordPress plugin versions 3.0.2 and earlier Description: The issue allows admins to perform SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. Recommendations: For The...

7.2CVSS7.9AI score0.00592EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/05/15 12:00 a.m.9 views

WordPress plugin Connexion Logs 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.2CVSS7.9AI score0.00592EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.12 views

The vulnerability of the VMware Aria Operations for Logs network log analysis tool lies in the insufficient protection of operational data, which allows an attacker to exploit this weakness to disclose protected information.

The vulnerability of the VMware Aria Operations for Logs network log analysis tool is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

8.5CVSS8.1AI score0.00675EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2025/05/13 12:15 p.m.36 views

CVE-2025-4649

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...

4.9CVSS0.00354EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/13 11:40 a.m.32 views

CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...

4.9CVSS6.5AI score0.00354EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/13 11:40 a.m.70 views

CVE-2025-4649

Centreon web contains an ACL-related privilege management flaw that can lead to privilege escalation when viewing the event logs. Affected versions are: 24.10.3–24.10.4, 24.04.09–24.04.10, 23.10.19–23.10.21, and 23.04.24–23.04.26. Remediation is to upgrade to 24.10.4+ for the 24.10 line, 24.04.10...

4.9CVSS6.5AI score0.00354EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/05/13 11:40 a.m.15 views

CVE-2025-4649 ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs.

Improper Handling of Exceptional Conditions vulnerability in Centreon web allows Privilege Escalation. ACL are not correctly taken into account in the display of the "event logs" page. This page requiring, high privileges, will display all available logs. This issue affects web: from 24.10.3 befo...

4.9CVSS6.6AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2025/05/13 8:28 a.m.8 views

kernel: platform/x86/amd/pmc: Detect when STB is not available

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amdpmc module as: amdpmc enablestb=1 ...can result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on R...

5.5CVSS6.8AI score0.00238EPSS
SaveExploits0References5
OSV
OSV
added 2025/05/13 5:14 a.m.10 views

CVE-2025-22246 CVE-2025-22246 – UAA Private Key Exposure

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs...

3CVSS6AI score
SaveExploits0References3
CVE
CVE
added 2025/05/13 5:14 a.m.80 views

CVE-2025-22246

CVE-2025-22246 affects Cloud Foundry UAA releases from 77.21.0 up to 77.31.0 (and CF deployment 45.1.0 to 48.11.0) with a private key exposure in logs. Root cause and exact vulnerability mechanics are described in the Cloud Foundry advisory: upgrading UAA to 77.32.0+ and CF deployment to 49.0.0+ ...

7.5CVSS3.8AI score0.00196EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2025/05/13 12:00 a.m.29 views

PT-2025-20886 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon web versions 24.10.3 through 24.10.4 Centreon web versions 24.04.09 through 24.04.10 Centreon web versions 23.10.19 through 23.10.21 Centreon web versions 23.04.24 through 23.04.26 Description: The issue is related to improper...

4.9CVSS6.4AI score0.00354EPSS
SaveExploits0References7
Circl
Circl
added 2025/05/12 1:52 a.m.17 views

CVE-2025-47187

creationtimestamp| type| source ---|---|--- 2025-05-12 01:52:58+00:00| seen| https://t.me/CyberBulletin/3248 2025-07-23 18:34:36+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114903985408711756 2025-07-23 21:07:01+00:00| seen|...

7.5CVSS4.8AI score0.00836EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
added 2025/05/12 12:00 a.m.8 views

VulnCheck KEV: CVE-2022-48164

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials...

7.5CVSS5.8AI score0.03096EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/12 12:00 a.m.15 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which arises from the possibility that call logs may still...

7.1CVSS6.2AI score0.00384EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/05/12 12:00 a.m.5 views

VulnCheck KEV: CVE-2024-48766

NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025. This is related to components/logs.php...

8.6CVSS5.8AI score0.69697EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/05/10 11:50 p.m.626 views

Exploit for Use After Free in Apple Ipados

iOS "Airborne" Vulnerabilities - Log Artifact Extractor This...

9.8CVSS9.7AI score0.03151EPSS
SaveExploits5
Circl
Circl
added 2025/05/10 6:26 a.m.36 views

CVE-2025-2944

creationtimestamp| type| source ---|---|--- 2025-05-10 06:26:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15885 2025-05-10 06:31:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loscyi2kh32e 2025-05-10 06:58:57+00:00| seen|...

6.4CVSS8.7AI score0.00418EPSS
SaveExploits0References4
Rows per page
Query Builder