Lucene search
+L

4449 matches found

osv-pysec
osv-pysec
•added 2022/03/15 3:15 p.m.•27 views

PYSEC-2022-167

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS1.8AI score0.01292EPSS
SaveExploits1References3
osv-ubuntu
osv-ubuntu
•added 2022/03/15 3:15 p.m.•10 views

UBUNTU-CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.8AI score0.01292EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/03/15 2:20 p.m.•50 views

CVE-2022-0430 Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

2.4CVSS5.7AI score0.01292EPSS
SaveExploits1References2
osv-cve
osv-cve
•added 2022/03/15 2:20 p.m.•17 views

CVE-2022-0430 Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

2.4CVSS3.9AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/03/15 2:20 p.m.•86 views

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS3.9AI score0.01292EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/03/14 10:50 p.m.•55 views

CVE-2022-24762 Exposure of Sensitive Information to an Unauthorized Actor in sysend.js

sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in...

6.5CVSS6.5AI score0.00684EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2022/03/14 10:50 p.m.•15 views

CVE-2022-24762 Exposure of Sensitive Information to an Unauthorized Actor in sysend.js

sysend.js is a library that allows a user to send messages between pages that are open in the same browser. Users that use cross-origin communication may have their communications intercepted. Impact is limited by the communication occurring in the same browser. This issue has been patched in...

6.5CVSS6.6AI score0.00684EPSS
SaveExploits1References4
osv-ghsa
osv-ghsa
•added 2022/03/12 12:00 a.m.•61 views

GHSA-9988-F88M-MR42 Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys...

7.5CVSS7.4AI score0.01099EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/03/12 12:00 a.m.•46 views

Moodle Exposure of Sensitive Information to an Unauthorized Actor

Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected...

4.3CVSS6.5AI score0.00773EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2022/03/12 12:00 a.m.•39 views

Moodle Exposure of Sensitive Information to an Unauthorized Actor

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability site administrators by default. Moodle versions 3.10 to 3.10.3 are affected...

4.3CVSS6.5AI score0.00737EPSS
SaveExploits0References3Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2022/03/12 12:00 a.m.•60 views

Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys...

7.5CVSS2.3AI score0.01099EPSS
SaveExploits1References3Affected Software1
GithubExploit
GithubExploit
•added 2022/03/11 6:39 a.m.•429 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Metabase

CVE-2021-41277 MetaBase Arbitrary File Reading This is a...

10CVSS7.3AI score0.97178EPSS
SaveExploits9
NVD
NVD
•added 2022/03/10 5:47 p.m.•33 views

CVE-2022-26311

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments...

7.5CVSS0.01155EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/10 5:47 p.m.•24 views

Design/Logic Flaw

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments...

5CVSS7.5AI score0.01155EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2022/03/09 11:15 a.m.•25 views

CVE-2022-0482

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...

9.1CVSS0.43746EPSS
SaveExploits7References4
osv-cve
osv-cve
•added 2022/03/09 10:20 a.m.•16 views

CVE-2022-0482 Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...

9.1CVSS9.1AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2022/03/09 10:20 a.m.•48 views

CVE-2022-0482 Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3...

9.1CVSS9.5AI score0.43746EPSS
SaveExploits7References4
NVD
NVD
•added 2022/03/08 12:15 p.m.•27 views

CVE-2021-42016

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM RMC30, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RP110, RUGGEDCOM...

7.5CVSS0.00627EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/03/08 11:31 a.m.•35 views

CVE-2022-26313

A vulnerability has been identified in Mendix Forgot Password Appstore module All versions = V3.3.0 V3.5.1. In certain configurations of the affected product, a threat actor could use the sign up flow to hijack arbitrary user accounts...

9.4AI score0.00968EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2022/03/08 6:44 a.m.•36 views

Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts

Details have been disclosed about a now-addressed critical vulnerability in Microsoft's Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control. "This attack could mean full control over resources and data belonging to the...

0.7AI score
SaveExploits0
Rows per page
Query Builder