bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

CVE-2026-115710

Use of Cache Containing Sensitive Information CWE-524 in Elasticsearch can lead to information disclosure and incorrect search results via specially crafted search requests. For some query types, Elasticsearch can share cached query results between users who have field-level security restrictions...

CVE-2026-115710 Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure

Use of Cache Containing Sensitive Information CWE-524 in Elasticsearch can lead to information disclosure and incorrect search results via specially crafted search requests. For some query types, Elasticsearch can share cached query results between users who have field-level security restrictions...

CVE-2026-115710

Elasticsearch versions 8.9.0 to 8.19.23 and 9.0.0 to 9.5.5 are vulnerable to CWE-524 (Use of Cache Containing Sensitive Information). The root cause is that Elasticsearch may share cached query results between users with and without field-level security restrictions. This allows restricted users ...

CVE-2026-115710 Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure

Use of Cache Containing Sensitive Information CWE-524 in Elasticsearch can lead to information disclosure and incorrect search results via specially crafted search requests. For some query types, Elasticsearch can share cached query results between users who have field-level security restrictions...

Elasticsearch 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-210)

Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure Use of Cache Containing Sensitive Information CWE-524 in Elasticsearch can lead to information disclosure and incorrect search results via specially crafted search requests. For some query types,...

CVE-2026-115710: Elastic Elasticsearch: Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and…

Use of Cache Containing Sensitive Information CWE-524 in Elasticsearch can lead to information disclosure and incorrect search results via specially crafted search requests. For some query types, Elasticsearch can share cached query results between users who have field-level security restrictions...

liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934

Authenticated Stored XSS in LifeRay 7.2.1 GA2 via MyAccountPortlet executed by Search Results In LifeRay version 7.1.0 through 7.2.1 GA2 the First Name, Middle Name, and Last Name fields for user accounts are all vulnerable to a Stored XSS issue. Any user can modify these fields with a particular...

CVE-2026-3008

CVE-2026-3008 — Notepad++ 8.9.3 Format String Injection via nativeLang.xml Vulnerability When a search operation produces results, sub1400916C0 formats a hit count label by retrieving a localized string from nativeLang.xml and passing it directly as the format string to wsprintfW: sub140099E60v37...

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270

This module provides a framework for integrating Drupal with AI providers. Its AI Search submodule provides a Search API backend that stores content in a vector database for semantic search. The AI Search submodule has always been marked as 'experimental' but more importantly is deprecated. You m...

CVE-2026-103911

The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.58.1. This is due to the software allowing users to execute an action that does not properly validate a value...

EUVD-2026-102646

The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.58.1. This is due to the software allowing users to execute an action that does not properly validate a value...

CVE-2026-84244

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

EUVD-2026-95243

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...

CVE-2026-84244 IBM Guardium Data Protection Cross-Site Scripting

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

CVE-2026-84244 IBM Guardium Data Protection Cross-Site Scripting

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

CVE-2026-84244: Improper Neutralization of Input During Web Page Generation

IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting XSS in the Quick Search results grid. An unauthenticated attacker who can influence monitored database traffic could execute malicious script in the browser of an authenticated...

PT-2026-108176

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Stored cross-site scripting XSS exists in the Quick Search results grid. An unauthenticated attacker capable of influencing monitored database traffic can execute malicious scripts within t...

PT-2026-107544

Name of the Vulnerable Software and Affected Versions @backstage/plugin-search-backend versions prior to 2.1.6 @backstage/plugin-search-backend-module-elasticsearch versions prior to 1.8.7 Description An authenticated user could receive unauthorized search results when a DENY policy is applied to...