Lucene search
+L

11362 matches found

CVE
CVE
•added 2026/09/24 7:08 p.m.•32 views

CVE-2026-82372

Brocade SANnav versions prior to 3.0.1a are vulnerable to improper handling of sensitive data during IPsec policy creation and modification. This flaw causes pre-shared keys to be recorded in application logs, potentially exposing credentials used to secure network tunnels to individuals with rea...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/24 7:08 p.m.•17 views

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 7:08 p.m.•19 views

EUVD-2026-86408

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/24 7:08 p.m.•43 views

CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS0.00168EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/24 1:56 p.m.•25 views

Security Bulletin: IBM ContextForge MCP Gateway is affected by path traversal

Summary IBM ContextForge MCP Gateway Admin API contains a path traversal vulnerability in the administrative log download handler /v1/admin/logs/file where an authenticated user with administrative privileges can retrieve files from sibling directories sharing a common path prefix with the log...

4.9CVSS5.9AI score0.00316EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/09/24 8:17 a.m.•14 views

CVE-2026-97181

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

6.9CVSS0.00261EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/24 7:07 a.m.•15 views

CVE-2026-97181 ezGlobal|GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

6.9CVSS5.9AI score0.00261EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/24 7:07 a.m.•44 views

CVE-2026-97181 ezGlobal|GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

6.9CVSS0.00261EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/24 7:07 a.m.•31 views

CVE-2026-97181

The GPM LIGHT software developed by ezGlobal contains a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs , potentially leading to the disclosure of sensitive information. No specific version numbers, root causes, or remediation steps are prov...

6.9CVSS5.9AI score0.00261EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/24 7:07 a.m.•16 views

EUVD-2026-85814

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

6.9CVSS5.9AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•8 views

PT-2026-97837

Name of the Vulnerable Software and Affected Versions IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.8 Description An authenticated administrator can perform path traversal via the Admin API log-download endpoint GET /v1/admin/logs/file. The issue occurs because the path confinement chec...

4.9CVSS5.8AI score0.00316EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•3 views

PT-2026-98279

Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware includes sensitive configuration information, such as WiFi credentials, within diagnostic logs created during the support process. These logs persist on removable storage...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-82716: Insertion of Sensitive Information into Log File

The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credentials, in diagnostic logs generated during the support process. These logs remain accessible on removable storage after the support operation has completed. An unauthenticated attacker with...

5.1CVSS5.8AI score0.00169EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•16 views

CVE-2026-97181: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

6.9CVSS5.9AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•8 views

CVE-2026-14442: Insertion of Sensitive Information into Log File

An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials to be written to application logs in plain text. When scheduled support save jobs or related operational tasks are executed, sensitive parameters including external server passwords and...

6.9CVSS5.9AI score0.00157EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-98254

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 3.0.1a Description Improper handling of sensitive data during the creation and modification of IPsec policies causes pre-shared keys to be recorded in application logs. Users with read access to system log file...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•9 views

CVE-2026-82372: Insertion of Sensitive Information into Log File

Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...

8.5CVSS5.8AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•10 views

PT-2026-97725

Name of the Vulnerable Software and Affected Versions GPM LIGHT affected versions not specified Description Unauthenticated remote attackers can directly access system logs, leading to sensitive data exposure. Recommendations At the moment, there is no information about a newer version that...

6.9CVSS5.8AI score0.00261EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•9 views

PT-2026-98295

Name of the Vulnerable Software and Affected Versions SANnav affected versions not specified Description An information exposure issue exists in the job scheduling component. When scheduled support save jobs or related operational tasks are executed, sensitive parameters such as external server...

6.9CVSS5.8AI score0.00157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-97717

Name of the Vulnerable Software and Affected Versions WPeMatico RSS Feed Fetcher versions prior to 2.8.26 Description The plugin fails to verify ownership or authorization before returning a campaign's stored configuration and run log. This allows users with contributor-level access and above to...

2.7CVSS5.9AI score0.00222EPSS
SaveExploits0References5
Rows per page
Query Builder