CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

428 matches found

CNNVD•added 2025/11/26 12:0 a.m.•7 views

OpenCode USSD Gateway 安全漏洞

OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway, which stems from improper access control of the /aux1/ocussd/trace endpoint, which could allow a low-privileged attacker to read...

4.3CVSS6.6AI score0.00256EPSS

Exploits1References4

Positive Technologies•added 2025/11/26 12:0 a.m.•13 views

PT-2025-48155

Name of the Vulnerable Software and Affected Versions OpenCode Systems USSD Gateway OC Release:5 version 6.13.11 Description A flaw exists in access control within the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5. This allows attackers with limited privileges to acces...

4.3CVSS6.5AI score0.00256EPSS

Exploits1References8

CVE•added 2025/11/26 12:0 a.m.•20 views

CVE-2025-65239

CVE-2025-65239 affects OpenCode Systems USSD Gateway OC Release:5 (version 6.13.11). The /aux1/ocussd/trace endpoint has incorrect access control, enabling attackers with low privileges to read server logs. Reported CVSSv3.1 base score is 4.3 (MEDIUM), with network access, low privileges required...

4.3CVSS6.4AI score0.00256EPSS

Exploits1References3Affected Software1

Tenable Nessus•added 2025/10/14 12:0 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-32916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form...

4.3CVSS5.5AI score0.00179EPSS

Exploits0References2

OSV•added 2025/10/09 3:0 p.m.•6 views

CVE-2025-32916 Sensitive form data in URL query parameters

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions 2.4.0p13, 2.3.0p38, 2.2.0p46, and 2.1.0 EOL may cause sensitive form data to be included in URL query parameters, which may be logged in various places such as browser history or web server logs...

1CVSS5.9AI score0.00179EPSS

Exploits0References3