Lucene search
+L

130 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/17 12:00 a.m.•1 views

CVE-2026-46782: Undefined Security Weakness

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

9.9CVSS5.7AI score0.00432EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/16 7:27 p.m.•16 views

CVE-2026-35284

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

9.9CVSS5.8AI score0.00432EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/03/07 4:15 p.m.•22 views

CVE-2026-29779

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS0.00489EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/03/07 3:19 p.m.•10 views

CVE-2026-29779

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00489EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/03/07 3:19 p.m.•56 views

CVE-2026-29779 UptimeFlare: Montior config / Credentials in `workerConfig` exposed in client-side JavaScript bundle

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS0.00489EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/07 3:19 p.m.•45 views

CVE-2026-29779

UptimeFlare (serverless uptime monitoring using Cloudflare Workers) had server-only configuration, workerConfig, exported from the same module as safe client data. Prior to commit 377a596, pages/incidents.tsx imported workerConfig into a client-side component, causing the entire workerConfig obje...

7.5CVSS5.7AI score0.00489EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/03/07 3:19 p.m.•18 views

EUVD-2026-10152

UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers. Prior to commit 377a596, configuration file uptime.config.ts exports both pageConfig safe for client use and workerConfig server-only, contains sensitive data from the same module. Due to...

7.5CVSS5.7AI score0.00489EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/07 12:00 a.m.•33 views

PT-2026-23863

Name of the Vulnerable Software and Affected Versions UptimeFlare versions prior to commit 377a596 Description UptimeFlare, a serverless uptime monitoring and status page solution powered by Cloudflare Workers, had a configuration issue. The uptime.config.ts file exported both pageConfig intended...

7.5CVSS5.7AI score0.00489EPSS
SaveExploits0References14
attackerkb
attackerkb
•added 2025/11/14 11:38 p.m.•9 views

CVE-2025-64308

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...

7.1CVSS5.8AI score0.00214EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•13 views

PT-2025-47030

Name of the Vulnerable Software and Affected Versions Brightpick Mission Control affected versions not specified Description The Brightpick Mission Control web application contains hardcoded credentials within its client-side JavaScript bundle. These credentials are directly embedded in the code,...

7.1CVSS6.5AI score0.00214EPSS
SaveExploits0References10
Rows per page
Query Builder