The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the abusefiltercheckmatch API. An attacker can access protected variables by bypassing authorization controls. Remediation Upgrade mediawiki/abuse-filter to version 1.43 or higher. References - Fix Commit -...

Efficient Unlearning with Privacy Guarantees

Privacy protection laws, such as the GDPR, grant individuals the right to request the forgetting of their personal data not only from databases but also from machine learning ML models trained on them. Machine unlearning has emerged as a practical means to facilitate model forgetting of data...

The vulnerability of Google Chrome and Microsoft Edge browsers allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Google Chrome and Microsoft Edge browsers is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by downloadin...

The vulnerability of the XML Services component of the Oracle BI Publisher software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the XML Services component of the Oracle BI Publisher software for creating reports is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the CRM User Management Framework component of the Oracle Common Applications suite, a part of the Oracle E-Business Suite, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CRM User Management Framework component in the Oracle Common Applications of the Oracle E-Business Suite relates to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-5920

The Sharable Password Protected Posts before version 1.1.1 allows access to password protected posts by providing a secret key in a GET parameter. However, the key is exposed by the REST API...

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

FileBrowser has an unspecified vulnerability (CNVD-2025-22703)

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser has a security vulnerability that stems from an improper implementation of password-protected links,...

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the FreeScout support service management system, related to incorrect authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

WordPress plugin Sharable Password Protected Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An information disclosure vulnerability exists in WordPress Sharable Password Protected Posts, which stems from the REST API exposing a key that can be exploited by an...

WordPress plugin DocCheck Login 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An Access Control Error vulnerability exists in WordPress DocCheck Login, which originates from a page load that redirects a user to login, and can be exploited by an...

CVE-2025-34053

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints...

The vulnerability of Documino’s automation platform for electronic document processing allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Documino automation platform for electronic document processing involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Documino automation platform for electronic document processing lies in its ability to bypass authentication by using a user-controlled key. This allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Documino automation platform for electronic document processing lies in the ability to bypass authentication by using a key controlled by the user. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Mattermost instant messaging application, related to incorrect authentication, allows a hacker to disclose protected information.

The vulnerability of the Mattermost instant messaging application is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2025-34053

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr function is used to identify ".cab" requests, allowing any URL containing ".cab" to bypass authentication and access protected endpoints...