API - CVE CyberSecurity Database News (Page 27)

Mar 25, 2025 API

CVE-2025-1974 - How Ingress-NGINX in Kubernetes Can Expose Your Secrets (And How Attackers Can Exploit It)

In mid-2025, a serious security vulnerability was found in Kubernetes, tracked as CVE-2025-1974. If you’re using the popular Kubernetes ingress-nginx controller, your cluster could

Mar 24, 2025 API Exploit

CVE-2025-26512 - SnapCenter Privilege Escalation Vulnerability Explained & Exploited

NetApp’s SnapCenter is a popular backup and management tool used by enterprises worldwide to safeguard applications, databases, and files. But in early 2025, cybersecurity

Mar 24, 2025 API Exploit

CVE-2025-30162 - Cilium Gateway API Ingress Network Policy Bypass — Analysis, Exploit, and Mitigation

Published: June 2024 Background Cilium is popular for Kubernetes networking, observability, and security. Its eBPF-based data plane makes it powerful and efficient. Cilium also integrates

Mar 23, 2025 API Java Apache

CVE-2025-27553 - Path Traversal Vulnerability in Apache Commons VFS before 2.10.

Apache Commons VFS is a popular Java library that provides a single API for accessing various different file systems, such as local files, FTP, SFTP,

Mar 22, 2025 WordPress API

CVE-2025-2331 - Sensitive Information Exposure in GiveWP – How Attackers Can Extract Donor Data via Misconfigured Capability Check

CVE-2025-2331 highlights a severe security vulnerability in the GiveWP — Donation Plugin and Fundraising Platform for WordPress, which affects all versions up to and including 3.