Lucene search
K

51 matches found

NVD
NVD
added 2026/05/28 9:16 a.m.11 views

CVE-2026-7526

The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueueblockassets. This makes it possible for authenticated attackers, with contributor-level access and above, to extract configuration data. License key...

4.3CVSS0.00038EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/28 7:43 a.m.7 views

EUVD-2026-32743

The PDF Embedder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.9.3 via the enqueueblockassets. This makes it possible for authenticated attackers, with contributor-level access and above, to extract configuration data. License key...

4.3CVSS5.8AI score0.00038EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/05/18 12:0 a.m.3 views

WordPress plugin Feeds for YouTube 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.4CVSS5.8AI score0.00013EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/04 8:25 a.m.1 views

EUVD-2025-206793

The Magic Import Document Extractor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.4 via the getfrontendsettings function. This makes it possible for unauthenticated attackers to extract the site's magicimport.ai license key from the...

5.3CVSS5.5AI score0.0002EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.3 views

WordPress plugin Magic Import Document Extractor 信息泄露漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.0002EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:21 a.m.2 views

CVE-2021-27795

Brocade Fabric OS FOS hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a...

8.1CVSS7AI score0.00039EPSS
Exploits0References1
Veracode
Veracode
added 2025/12/13 4:34 a.m.2 views

Sensitive Information Disclosure

Jenkins ReadyAPI Functional Testing Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to storing license keys, client secrets, and passwords in plaintext in job configuration files, allowing users with Item/Extended Read permission or file system access on the...

6.5CVSS6.9AI score0.00216EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/04 12:11 a.m.10 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS6.9AI score0.00032EPSS
Exploits2References1
OSV
OSV
added 2025/12/03 4:15 p.m.2 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS5.7AI score
Exploits0References2
NVD
NVD
added 2025/12/03 4:15 p.m.2 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

7.5CVSS0.00032EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2025/12/03 12:0 a.m.1 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

6.5AI score0.00032EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2025/12/03 12:0 a.m.3 views

PT-2025-48939

Name of the Vulnerable Software and Affected Versions Abacre Restaurant Point of Sale POS versions up to 15.0.0.1656 Description The application stores sensitive information, specifically valid device-bound license keys, in process memory during an activation attempt. This could allow unauthorize...

7.5CVSS6.2AI score0.00032EPSS
Exploits2References5
Cvelist
Cvelist
added 2025/12/03 12:0 a.m.29 views

CVE-2025-65320

Abacre Restaurant Point of Sale POS up to 15.0.0.1656 are vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory during an activation attempt...

0.00032EPSS
Exploits2References2
CVE
CVE
added 2025/12/03 12:0 a.m.6 views

CVE-2025-65320

CVE-2025-65320 affects Abacre Restaurant Point of Sale (POS) up to version 15.0.0.1656. The root cause is Cleartext Storage of Sensitive Information in Memory: valid device-bound license keys are left in process memory during an activation attempt. Several connected sources corroborate that all v...

7.5CVSS6.5AI score0.00032EPSS
Exploits2References2Affected Software1
Packet Storm News
Packet Storm News
added 2025/11/27 12:0 a.m.3 views

Abacre Restaurant Point of Sale Insecure Storage

All versions of Abacre Restaurant Point of Sale POS up to 15.0.0.1656 leave device-bound license keys in process memory insecurely...

6.9AI score0.00032EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/10/28 12:27 a.m.5 views

CVE-2025-60791

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump an...

6.2CVSS6.8AI score0.00011EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/27 6:31 p.m.2 views

EUVD-2025-36218

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump an...

6.2CVSS6.3AI score0.00011EPSS
Exploits1References3
NVD
NVD
added 2025/10/27 4:15 p.m.2 views

CVE-2025-60791

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump an...

6.2CVSS0.00011EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/10/27 12:0 a.m.4 views

CVE-2025-60791

Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump an...

0.00011EPSS
Exploits1References2
CVE
CVE
added 2025/10/27 12:0 a.m.8 views

CVE-2025-60791

CVE-2025-60791 affects Easywork Enterprise 2.1.3.354. The vulnerability is Cleartext Storage of Sensitive Information in Memory, where device-bound license keys remain in process memory after a failed activation. An attacker with local access can attach a debugger or dump memory to retrieve keys ...

6.2CVSS6.5AI score0.00011EPSS
Exploits1References2
Rows per page
Query Builder