KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

EUVD-2026-67207

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of...

CVE-2019-11932

CVE-2019-11932 Die Adresse von system und des Gadgets müssen durch die tatsächliche Adresse ersetzt werden, die durch eine Information-Disclosure-Schwachstelle gefunden wurde. Nach dem Ersetzen der Adresse von system und des Gadgets. Führen Sie den Code aus, um die beschädigte GIF-Datei zu...

CVE-2020-15053

CVE-2020-15053 : Artica Proxy vor 4.28.030418 Community Edition erlaubt Reflektiertes Cross-Site-Scripting. Produktbeschreibung: Artica Tech bietet eine leistungsstarke, aber einfach zu bedienende Lösung, die normalerweise großen und multinationalen Unternehmen vorbehalten ist. Mit einem Startpre...

CVE-2020-15052

CVE-2020-15052 : Artica Proxy antes da versão 4.28.030418 Community Edition permite SQL Injection. Product Description: A Artica Tech oferece uma solução poderosa mas simples de usar, geralmente reservada a grandes empresas e multinacionais. Com um preço inicial de apenas 99€ e mais de 62 000...

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Cross-Site-Scripting XSS-Schwachstelle Bestätigt auf 1.6.1 ältere Versionen sind wahrscheinlich betroffen Beschreibung: Es wurde festgestellt, dass die Webanwendung vom Benutzer bereitgestellte Eingaben ohne ordnungsgemäße Eingabevalidierung oder...

CVE-2026-81702

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:49+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyxtoht2e 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:01:13+00:00| seen|...

CVE-2026-81701

creationtimestamp| type| source ---|---|--- 2026-08-27 18:09:44+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyp7axf2b 2026-08-27 19:24:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117169103851890443 2026-08-27 20:01:05+00:00| seen|...

CVE-2024-57725

CVE-2024-57725: Vulnerabilità di manipolazione del link GPON in alcuni router Arcadyan distribuiti da Orange e Jazztel Questo repository documenta una vulnerabilità non autenticata scoperta nei router Arcadyan LiveboxFibra distribuiti da Orange e Jazztel in Spagna PRV3399BBLT. Il problema risiede...

CVE-2023-5561-PoC

CVE-2023-5561-PoC WordPress schränkt nicht ordnungsgemäß ein, welche Benutzerfelder über die REST-API durchsuchbar sind, sodass nicht authentifizierte Angreifer die E-Mail-Adressen von Benutzern herausfinden können, die öffentliche Beiträge auf einer betroffenen Website veröffentlicht haben,...

CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

EUVD-2026-67188

Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...

CVE-2026-59302

CVE-2026-59302 affects Spring Cloud Stream versions 5.0.0–5.0.2, 4.3.0–4.3.3, and 4.2.0–4.2.6, where the logging functionality may record sensitive data. The CVSS 3.1 base score is 3.1 (LOW) , with a network attack vector, high attack complexity, high privileges required, and user interaction req...

CVE-2026-59300 Potential for logging sensitive data in Spring Cloud Function AWS

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

EUVD-2026-67186

Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

CVE-2026-59301

Spring Cloud Function Azure is susceptible to a sensitive data logging issue, where potentially sensitive information may be written to logs. The vulnerability affects Spring Cloud Function versions 5.0.0–5.0.3, 4.3.0–4.3.4, and 4.2.0–4.2.7. The CNA-assigned CVSS 3.1 score is 3.1 (LOW) , reflecti...

CVE-2026-59301 Potential for logging sensitive data in Spring Cloud Function Azure

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

EUVD-2026-67187

Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...

CVE-2026-59300

Spring Cloud Function AWS is affected by a vulnerability where sensitive data may be logged . The issue affects versions 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier . The CVSS 3.1 score is 3.1 (Low) , with a vector requiring network access, high attack complexity, high privil...

EUVD-2026-67180

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to $java.io.tmpdir/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring...