CVE-2025-55710

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-54736

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NordicMade Savoy savoy allows Retrieve Embedded Sensitive Data.This issue affects Savoy: from n/a through = 3.0.8...

MAL-2025-31016 Malicious code in qlik-cloud-embedded-analytics-workshop (npm)

The package qlik-cloud-embedded-analytics-workshop was found to contain malicious code...

Malicious code in embedded-finance (npm)

The package embedded-finance was found to contain malicious code...

MAL-2025-19553 Malicious code in embedded-finance (npm)

The package embedded-finance was found to contain malicious code...

Malicious code in qlik-cloud-embedded-analytics-workshop (npm)

The package qlik-cloud-embedded-analytics-workshop was found to contain malicious code...

CVE-2025-55710 WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress simple-tags allows Retrieve Embedded Sensitive Data.This issue affects TaxoPress: from n/a through = 3.37.2...

CVE-2025-55710

CVE-2025-55710 affects TaxoPress plugin for WordPress (versions

CVE-2025-55673 Apache Superset: Metadata exposure in embedded charts

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user. Thi...

CVE-2025-55673 Apache Superset: Metadata exposure in embedded charts

When a guest user accesses a chart in Apache Superset, the API response from the /chart/data endpoint includes a query field in its payload. This field contains the underlying query, which improperly discloses database schema information, such as table names, to the low-privileged guest user. Thi...

CVE-2025-8961

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited...

CVE-2025-54685

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force SureDash suredash allows Retrieve Embedded Sensitive Data.This issue affects SureDash: from n/a through = 1.1.0...

CVE-2025-54685

The CVE-2025-54685 describes a vulnerability in WordPress SureDash (Brainstorm Force) plugin versions up to 1.1.0 where insertion of sensitive information into sent data can lead to retrieval of embedded sensitive data. The issue affects SureDash dated to n/a through 1.1.0, with a CVSS v3.1 base ...

CVE-2025-47444

Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiboSearch: from n/a through = 1.32.1...

PT-2025-33390 · Nordicmade · Savoy

Name of the Vulnerable Software and Affected Versions: NordicMade Savoy versions through 3.0.8 Description: An issue exists in NordicMade Savoy that allows the retrieval of embedded sensitive data due to exposure of sensitive system information to an unauthorized control sphere. Recommendations: ...

PT-2025-33237 · Suredash · Suredash

Name of the Vulnerable Software and Affected Versions: SureDash versions through 1.1.0 Description: SureDash is susceptible to a flaw that permits the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: Update SureDash to a version...

SILA Embedded Solutions Freemodbus 安全漏洞

SILA Embedded Solutions Freemodbus is an open source Modbus protocol stack from SILA Embedded Solutions. A security vulnerability exists in SILA Embedded Solutions Freemodbus v.2018-09-12, which stems from a specially crafted length value leading to an infinite loop...

CVE-2025-47444

Insertion of Sensitive Information Into Sent Data vulnerability in Liquid Web GiveWP allows Retrieve Embedded Sensitive Data.This issue affects GiveWP: from n/a before 4.6.1...

CVE-2025-47444

CVE-2025-47444 affects the WordPress FiboSearch plugin (ajax-search-for-woocommerce) with versions

PT-2025-32630

Name of the Vulnerable Software and Affected Versions: GiveWP versions prior to 4.6.1 Description: GiveWP contains a flaw related to the insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Recommendations: Update GiveWP to version 4.6.1 or later...