CVE-2026-116198

Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encryptedcustomfields. Authenticated API users without that permission can create assets whose sensitive...

CVE-2026-116198 Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encryptedcustomfields. Authenticated API users without that permission can create assets whose sensitive...

CVE-2026-116198

Versions of Snipe-IT before 8.7.0 are vulnerable to a missing encryption flaw in the Api echtAssetsController::store method. The root cause is that the application fails to encrypt data when callers lack the assets.view.encrypted_custom_fields permission. Consequently, authenticated API users wit...

EUVD-2026-109456

Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encryptedcustomfields. Authenticated API users without that permission can create assets whose sensitive...

CVE-2026-116198 Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encryptedcustomfields. Authenticated API users without that permission can create assets whose sensitive...

PT-2026-123039

Snipe-IT before 8.7.0 contains a missing encryption vulnerability in ApiAssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encrypted custom fields. Authenticated API users without that permission can create assets whose sensitiv...

CVE-2026-115247

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

CVE-2026-115247 subhajitkhan online-clinic-management-system patientregistration.php missing encryption

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

CVE-2026-115247 subhajitkhan online-clinic-management-system patientregistration.php missing encryption

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

CVE-2026-115247

The subhajitkhan online-clinic-management-system (up to commit e9ee77a8827a1446220fa07ee693dc4d9a29a578) is vulnerable to missing encryption of sensitive data within the patientregistration.php file. Attackers can remotely manipulate the pat_pswd or doc_pswd arguments to exploit this flaw. Public...

CVE-2026-115247 subhajitkhan online-clinic-management-system patientregistration.php missing encryption

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

EUVD-2026-108163

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument patpswd/docpswd leads to missing encryption of...

PT-2026-121385

A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code of the file patientregistration.php. The manipulation of the argument pat pswd/doc pswd leads to missing encryption of...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-86375

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-86375

Dell Application Installer , versions prior to 26.09.0.1 , contains a Missing Encryption of Sensitive Data vulnerability (CWE-311). An unauthenticated attacker with local access could potentially exploit this flaw to gain Unauthorized access to sensitive information. Remediation is available via ...

EUVD-2026-104389

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-111063: Missing Encryption of Sensitive Data

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequently cause a shared cookie marked Secure to be sent with an unencrypted request. This issue is fixed in version 3.14.4...

PT-2026-117446

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-86375: Missing Encryption of Sensitive Data

Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...