CVE-2025-13163

CVE-2025-13163 affects EasyFlow GP by Digiwin. The issue is insufficient protection of credentials in the system frontend, enabling privileged remote attackers to obtain plaintext database credentials. Impact is high on confidentiality per the CVSS metrics; exploitation details and a concrete fix...

CVE-2025-13163 Digiwin｜EasyFlow GP - Insufficiently Protected Credentials

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend...

ZenCount Visitor Counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to errors in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the connectorbadedid function in the drivers/gpu/drm/drmedid.c file of the Linux kernel’s Direct Rendering Infrastructure support module is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Linux device driver support library Heap Buffer Overflow DoS

The vulnerability of the xhcihandlestoppedcmdring function in the drivers/usb/host/xhci-ring.c module of the Linux device support driver for USB chipsets is related to the use of an unreliable pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

Linux kernel driver CMA buffer overflow DoS

The vulnerability of the cmaCancelRoute function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to gain...

DNS BIND Predictable State Data Compromise

The vulnerability of the BIND DNS server relates to predictability due to the observation of its status. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the protected information...

ZenCount visitor counter Data Compromise

The vulnerability of the ZenCount visitor counter is related to insufficient protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

PowerChute Serial Shutdown Authentication Bypass

The vulnerability of the PowerChute Serial Shutdown software for controlling uninterruptible power sources is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected...

IndustryPack device support driver Heap Buffer Overflow Info Disclosure

The vulnerability of the ipoctalinstslot function in the module drivers/ipack/devices/ipoctal.c of the IndustryPack device support driver for the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected informati...

CVE-2025-13163: Insufficiently Protected Credentials

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend...

Linux kernel act_ct.c function Heap Buffer Overflow DoS

The vulnerability of the tcfcthandlefragments function in the net/sched/actct.c module of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

Nagios XI Disclosure Information Disclosure

The vulnerability of the Nagios XI monitoring tool is related to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

usdGltf Plugin Unauthorized Access

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

usdGltf Plugin Unauthorized Access

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

usdGltf Plugin Unauthorized Access

The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Incorrect Authorization

Overview @apollo/composition is an Apollo Federation composition utilities Affected versions of this package are vulnerable to Incorrect Authorization via the composition logic, which failed to validate that fields have the same access control requirements as the data they reference. An attacker...

drivers/gpu/drm/drm_buddy Heap Buffer Overflow DoS

Vulnerability of the allocrange function in the drivers/gpu/drm/drmbuddy.c module – The DRI driver for Linux’s kernel-based direct rendering infrastructure is vulnerable due to insufficient handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the...

Windows License Manager Disclosure

The vulnerability of the Windows License Manager for operating systems involves the disclosure of information through registration files. Exploiting this vulnerability can allow a hacker to disclose the protected information...

Microsoft Office Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these security measures...