15009 matches found
PT-2025-50291
Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier Description The software contains an issue with insufficiently protected credentials, potentially allowing limited unauthorized write access. An attacker could exploit improperly stored ...
Nagios Log Server Disclosure
The vulnerability of the user import function in the Nagios Log Server monitoring and analysis software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...
Siemens Energy Services
SUMMARY Energy Services from Siemens previously known as Managed Applications and Services, sell solutions using Elspec G5 devices that allows a person with physical access to the device to reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB...
CVE-2025-66202 Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. While the original CVE-2025-64765 was fixed in v5.15.8,...
Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Authentication Bypass via Double URL Encoding in Astro Bypass for CVE-2025-64765 / GHSA-ggxq-hp9w-j794 --- Summary A double URL encoding bypass allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. Whi...
GHSA-WHQG-PPGF-WP8C Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765
Authentication Bypass via Double URL Encoding in Astro Bypass for CVE-2025-64765 / GHSA-ggxq-hp9w-j794 --- Summary A double URL encoding bypass allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. Whi...
Linux SMB Subsystem Heap Buffer Overflow DoS
The vulnerability of the smb2findcontextvals function in the fs/smb/server/oplock.c module of the SMB subsystem in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain access to...
scsi_host_alloc Heap Buffer Overflow DoS
Vulnerability of the scsihostalloc function in the drivers/scsi/hosts.c module – The SCSI device driver support in Linux operating systems is vulnerable due to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker ...
iOS iPadOS Permission Misconfiguration
The vulnerability of iOS and iPadOS operating systems is related to incorrect default permissions. Exploiting this vulnerability can allow attackers to access protected information by circumventing screen lock security restrictions...
Mattermost Authentication Bypass
The vulnerability of the Mattermost instant messaging application is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
Cisco Unified Contact Center Express Information Disclosure
The vulnerability of the web interface of the Cisco Unified Contact Center Express Unified CCX software for automating operator operations is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to disclose protected...
Linux Btrfs Component Compromise
The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Linux kernel Memory Initialization Error
The vulnerability of the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...
Knomary TMS Auth Bypass
The vulnerability of the Knomary TMS training platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux driver/soc/qcom/mdt_loader.c Unauthorized Access
The vulnerability of the drivers/soc/qcom/mdtloader.c component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...
Linux network driver kernel Data Compromise
The vulnerability of the Linux operating system’s kernel network driver is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of the protected information...
IBM Concert Software Information Disclosure
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that system data can be disclosed to unauthorized individuals during the processing of HTTP headers. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...
drm/xe/guc Linux Component Data Compromise
The vulnerability of the drm/xe/guc component in the Linux operating system is related to improper checking or processing of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
Zabbix IT-infrastructure monitoring system Password Storage Unencrypted
The vulnerability of the Zabbix IT-infrastructure monitoring system lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability allows a malicious actor to gain access to protected information...
Linux clone_private_mnt() Buffer Overflow DoS
The vulnerability of the cloneprivatemnt function in the Linux operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...