Aggregator

CVE-2025-20230 | Splunk Enterprise/Secure Gateway App Key Value Store access control (SVD-2025-0307 / Nessus ID 233365)

Vuldb Updates
3 months 1 week ago
A vulnerability, which was classified as critical, was found in Splunk Enterprise and Secure Gateway. This affects an unknown part of the component App Key Value Store. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2025-20230. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-31165 | FPT NightWolf Penetration Platform up to 1.2.2 Logbug Module cross site scripting

Vuldb Updates
3 months 1 week ago
A vulnerability has been found in FPT NightWolf Penetration Platform up to 1.2.2 and classified as problematic. This vulnerability affects unknown code of the component Logbug Module. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-31165. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-0273 | HCL DevOps Deploy/Launch Authentication Token log file (KB0120138)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in HCL DevOps Deploy and Launch. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Authentication Token Handler. The manipulation leads to sensitive information in log files. This vulnerability is known as CVE-2025-0273. It is possible to launch the attack on the local host. There is no exploit available.
vuldb.com

CVE-2017-16352 | GraphicsMagick 1.3.26 magick/describe.c DescribeImage memory corruption (USN-4232-1 / EDB-43111)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as critical was found in GraphicsMagick 1.3.26. Affected by this vulnerability is the function DescribeImage of the file magick/describe.c. The manipulation leads to memory corruption. This vulnerability is known as CVE-2017-16352. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad