Lucene search
+L

545 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•4 views

CVE-2026-39686: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded Sensitive Data.This issue affects BSK PDF Manager: from n/a through = 3.7.2...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•27 views

PT-2026-31146

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through = 2.7.16...

5.9AI score0.0033EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•28 views

PT-2026-31161

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/...

5.9AI score0.00259EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•10 views

CVE-2026-39516: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Retrieve Embedded Sensitive Data.This issue affects Nexter Blocks: from n/a through = 4.7.0...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•6 views

CVE-2026-39572: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue affects Bus Ticket Booking with Seat Reservation: from n/...

4.3CVSS5.8AI score0.00259EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•8 views

CVE-2026-3991: Inclusion of Functionality from Untrusted Control Sphere

Symantec Data Loss Prevention Windows Endpoint, prior to 25.1 MP1, 16.1 MP2, 16.0 RU2 HF9, 16.0 RU1 MP1 HF12, and 16.0 MP2 HF15, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain...

7.8CVSS6.1AI score0.00162EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/03/25 4:46 p.m.•163 views

Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo

CVE-2025-32463 The principle is fairly simple: the -R option i...

9.3CVSS8AI score0.55498EPSS
SaveExploits73
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•8 views

CVE-2026-25344: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme Review Schema review-schema allows Retrieve Embedded Sensitive Data.This issue affects Review Schema: from n/a through = 2.2.6...

6.5CVSS5.8AI score0.0027EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/23 12:00 a.m.•15 views

Siemens APE1808 Exposure of Sensitive System Information to an Unauthorized Control Sphere (CVE-2025-4614)

An information disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to view session tokens of users authenticated to the firewall web UI. This may allow impersonation of users whose session tokens are leaked. This plugin only works with Tenable.ot...

4.8CVSS5.7AI score0.00258EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•7 views

CVE-2026-32372: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in RadiusTheme ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder allows Retrieve Embedded Sensitive Data.This issue affects ShopBuilder – Elementor WooCommerce Builder Addons: from n/a through =...

5.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/13 12:00 a.m.•22 views

PT-2026-25251

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through = 8.3.9...

5.8AI score0.00343EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/13 12:00 a.m.•9 views

CVE-2026-32405: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in xtemos WoodMart woodmart allows Retrieve Embedded Sensitive Data.This issue affects WoodMart: from n/a through = 8.3.9...

5.3CVSS5.8AI score0.00343EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/10 2:12 a.m.•15 views

CVE-2025-70046

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

9.8CVSS5.8AI score0.00365EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/09 6:31 p.m.•17 views

EUVD-2025-208425

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

5.8AI score0.00365EPSS
SaveExploits0References4
OSV
OSV
•added 2026/03/09 4:16 p.m.•18 views

CVE-2025-70046

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

9.8CVSS5.8AI score0.00365EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/09 4:16 p.m.•14 views

CVE-2025-70046

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

9.8CVSS0.00365EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/09 12:00 a.m.•32 views

CVE-2025-70046

The Miazzy oa-front-service master component is affected by CVE-2025-70046 , a vulnerability involving CWE-829: Inclusion of Functionality from Untrusted Control Sphere . This security flaw stems from the inclusion of functions originating from sources outside the scope of trusted control within ...

9.8CVSS5.8AI score0.00365EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/09 12:00 a.m.•6 views

CVE-2025-70046

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

5.8AI score0.00365EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/09 12:00 a.m.•7 views

CVE-2025-70046: Inclusion of Functionality from Untrusted Control Sphere

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

9.8CVSS5.7AI score0.00365EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/09 12:00 a.m.•10 views

CVE-2025-70046

An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master...

5.8AI score0.00365EPSS
SaveExploits0References4
Rows per page
Query Builder