239 matches found
CVE-2025-54459 Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere
Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session identifiers, authorization headers, serve...
EUVD-2025-36220
IDOR vulnerability in Educare ERP 1.0 2025-04-22 allows unauthorized access to sensitive data via manipulated object references. Affected endpoints do not enforce proper authorization checks, allowing authenticated users to access or modify data belonging to other users by changing object...
CVE-2025-22176
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items...
CVE-2025-22178
CVE-2025-22178 affects Atlassian Jira Align. The issue is an authorization flaw allowing a low-privilege user to access unexpected endpoints, disclosing a small amount of sensitive information (e.g., viewing items on the “Why” page). Documented across multiple sources (NVD/Red Hat/EUVD/etc.). No ...
Newforma Project Center Server Information Disclosure Vulnerability (CNVD-2025-25476)
Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information disclosure vulnerability exists in Newforma Proje...
CVE-2025-11517
CVE-2025-11517 affects the WordPress plugin “Event Tickets and Registration” (
EUVD-2025-34731
Mattermost has a Missing Authorization vulnerability...
Information Exposure
Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...
EUVD-2021-0770
Malware in sbrugna...
EUVD-2020-0398
Malware in sbrugna...
EUVD-2021-11511
Malware in sbrugna...
Sensitive Information Disclosure
github.com/argoproj/argo-cd is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the project details API returning stored repository usernames and passwords in its response, and an attacker with a token scoped only for standard application management can call that endpoi...
CVE-2025-59452
The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50...
EUVD-2025-6863
Malicious code in bioql PyPI...
EUVD-2023-1271
Malicious code in bioql PyPI...
EUVD-2024-36483
Malicious code in bioql PyPI...
EUVD-2024-1492
Malicious code in bioql PyPI...
EUVD-2022-4750
Malicious code in bioql PyPI...