Lucene search
+L

3805 matches found

CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•20 views

WordPress plugin File Manager, Code Editor, and Backup by Managefy has a vulnerability related to information leakage.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosu...

5.3CVSS5.6AI score0.00378EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/01 12:00 a.m.•30 views

IBM Transformation Extender Advanced log information leakage vulnerability

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. IBM Transformation Extender Advanced suffers from a log information disclosure vulnerability that originates from storing sensitive information in ...

4.4CVSS5.3AI score0.00116EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/30 12:00 a.m.•25 views

PT-2025-40060

Name of the Vulnerable Software and Affected Versions The File Manager, Code Editor, and Backup by Managefy plugin for WordPress versions prior to 1.6.2 Description The plugin is susceptible to a sensitive information exposure issue due to publicly exposed log files. This allows unauthenticated...

5.9CVSS5.8AI score0.00378EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
•added 2025/09/29 1:48 p.m.•20 views

CVE-2025-36144

IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...

3.3CVSS5.2AI score0.00127EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•30 views

IBM Watsonx.data Log Information Disclosure Vulnerability

IBM Watsonx.data is an open data lake warehouse platform from International Business Machines IBM. IBM Watsonx.data suffers from a log information disclosure vulnerability that stems from storing potentially sensitive information in log files, which can be exploited by an attacker to cause it to ...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/27 4:45 a.m.•25 views

CVE-2025-9985

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

5.3CVSS5.7AI score0.1231EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/27 1:15 a.m.•28 views

CVE-2025-36144

IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/27 12:05 a.m.•12 views

CVE-2025-36144 IBM watsonx.data information disclosure

IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...

3.3CVSS5.2AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/27 12:05 a.m.•32 views

CVE-2025-36144 IBM watsonx.data information disclosure

IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...

3.3CVSS0.00127EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/27 12:05 a.m.•50 views

CVE-2025-36144

CVE-2025-36144 affects IBM Lakehouse (watsonx.data 2.2). The vulnerability arises from logging potentially sensitive information, allowing a local user to read log files and disclose data. Affected component/file is the logging path used by watsonx.data, with root cause described as information d...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/09/27 12:00 a.m.•23 views

IBM Watsonx.data log information leakage vulnerability

IBM Watsonx.data is an open data lake warehouse platform from International Business Machines IBM. IBM Watsonx.data suffers from a log information disclosure vulnerability that stems from storing potentially sensitive information in log files, which can be exploited by an attacker to cause it to ...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•12 views

CVE-2025-36144: Insertion of Sensitive Information into Log File

IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References3
NVD
NVD
•added 2025/09/26 5:15 a.m.•32 views

CVE-2025-9985

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

5.3CVSS0.1231EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/09/26 4:25 a.m.•15 views

CVE-2025-9985 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

5.3CVSS5.7AI score0.1231EPSS
SaveExploits1References3
CVE
CVE
•added 2025/09/26 4:25 a.m.•56 views

CVE-2025-9985

CVE-2025-9985 concerns the WordPress plugin Featured Image from URL (FIFU) , with an unauthenticated information exposure in all versions up to and including 5.2.7 due to publicly exposed log files. The Nuclei template and related sources confirm that unauthenticated attackers can view sensitive ...

5.3CVSS5.7AI score0.1231EPSS
SaveIn wildExploits1References3
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•17 views

WordPress plugin: Featured Image from URL log information leakage vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A log information...

5.3CVSS5.8AI score0.1231EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•35 views

PT-2025-39696

Name of the Vulnerable Software and Affected Versions IBM Lakehouse watsonx.data version 2.2 Description The software stores potentially sensitive information in log files. A local user could read these log files, leading to information disclosure. Recommendations At the moment, there is no...

5.5CVSS5.3AI score0.00127EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•8 views

CVE-2025-9985: Insertion of Sensitive Information into Log File

The Featured Image from URL FIFU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the...

5.3CVSS5.7AI score0.1231EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•23 views

PT-2025-39499

Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions 5.2.7 and earlier Description The Featured Image from URL FIFU plugin for WordPress is susceptible to Sensitive Information Exposure due to publicly exposed log files. This allows...

5.3CVSS5.8AI score0.1231EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2025/09/19 12:00 a.m.•28 views

PT-2025-38624

A vulnerability. When org.apache.linkis.metadata.util.HiveUtils.decode fails to perform Base64 decoding, it records the complete input parameter string in the log via logger.errorstr + "decode failed", e. If the input parameter contains sensitive information such as Hive Metastore keys, plaintext...

5.7AI score0.00472EPSS
SaveExploits0References4
Rows per page
Query Builder