The vulnerability in the sceenario of the program /actions/infoAction.php for implementing the MediaWiki hypertext environment allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the infoAction.php script used in the MediaWiki hypertext environment involves insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerabilities in the following files include/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php are related to the software used for implementing the MediaWiki hypertext environment. These vulnerabilities allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/api/apiFormatBase.php, includes/api/apiHelp.php, includes/resourceLoader/module.php, includes/hooks/handlers/pageDisplayHookHandler.php, and includes/logFormatter/permissionChangeLogFormatter.php, which are used for implementing the MediaWiki hypertext...

The vulnerability in the parser.php script of the MediaWiki software, which is used to implement the hypertext environment, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the parser script included in the MediaWikia hypertext environment’s implementation lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-75015 Apache Syncope: Nested secrets leak cleartext into audit records readable

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

EUVD-2026-77461

Insufficiently Protected Credentials vulnerability in Apache Syncope. Audit events, when sent to the configured store, are not sufficiently masked for the sensitive values they might carry on their payloads, thus allowing administrators to access such sensitive values. This issue affects Apache...

CVE-2026-64918

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-77909

CVE-2026-77909 affects Azure CycleCloud , where insufficiently protected credentials allow an authorized attacker to disclose information over a network . The vulnerability is rated CVSS 3.1 7.7 (HIGH) with a scope change and high confidentiality impact (vector: AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:...

PT-2026-87214

Insufficiently protected credentials in Microsoft Office allows an unauthorized attacker to perform spoofing over a network...

ROS-20260908-73-0042

The vulnerability in mongodb-org is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the configuration file 4_testintegration_fim-tier-0-1-win.yml on the Wazuh security monitoring and threat detection platform allows a perpetrator to gain access to and modify this data.

The vulnerability of the configuration file 4testintegrationfim-tier-0-1-win.yml of the security monitoring and threat detection platform Wazuh is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain read access and modify data...

ROS-20260904-73-0005

The vulnerability of Intel microprogramming software is related to insufficient protection of system data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the tcf_ct_skb_nfct_cached() function in the net/sched/act_ct.c module of the network scheduling subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcfctskbnfctcached function in the net/sched/actct.c module of the net/sched subsystem of the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260902-73-0006

The vulnerability in mongodb-org is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

EUVD-2026-68010

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.4, 3.3.3, 3.4.6, and 3.5.3, MariaDB Connector/Node.js can disclose an account password when PAM dialog authentication is negotiated over an insecure transport. In...

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials in the authentication. An attacker can intercept sensitive credentials by performing a man-in-the-middle attack during the initial handshake. Note: This is only exploitable if SSL/TLS is enabled...

The vulnerability in the lib/LWP/UserAgent.pm module, a set of modules for working with LWP::UserAgent web resources, allows a perpetrator to access confidential data.

The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

The vulnerability of the Windows Media component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Media component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

EUVD-2026-66423

Rently Smart Home versions 20.1.0 and prior are vulnerable to an Insufficiently Protected Credentials vulnerability. This could allow an attacker to retrieve pins including the Master Pin, overriding standard user permissions...

PYSEC-2026-3782

NVIDIA NemoClaw contains a vulnerability where an attacker could cause insufficiently protected credentials . A successful exploit of this vulnerability might lead to information disclosure and data tampering...