32306 matches found
CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...
CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask
A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...
CVE-2026-33333
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-33333
Combodo iTop , a web-based IT service management tool, is affected by a sensitive information disclosure vulnerability in the ajax.render.php component prior to version 3.2.3 . Error messages expose sensitive information to authenticated users. The CVSS 3.1 score is 3.5 (LOW) , reflecting low con...
EUVD-2026-64182
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-33333 Combodo iTop: Information disclosure in ajax.render.php
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-33333 Combodo iTop: Information disclosure in ajax.render.php
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-69225
Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier are affected by an information disclosure vulnerability that allows a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body. The NVD scores this CVSS 7.5 (HIGH) with high confidentiality impact, whi...
CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
CVE-2026-69224
Esri Portal for ArcGIS versions 12.0 and earlier are affected by an information disclosure vulnerability that may allow a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body under difficult-to-reproduce circumstances. The primary impact is confidentiality (h...
CVE-2026-27875
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...
CVE-2026-27875
Johnson Controls Simplex Incident Manager / Autocall Fire Administrator (before 2.01.05 ) stores user credentials—passwords and authentication tokens—in unencrypted form within system memory while running. A local attacker with low privileges can extract these embedded sensitive data using memory...
CVE-2026-27875 Simplex Incident Manager Clear Test
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...
CVE-2026-27875 Simplex Incident Manager Clear Test
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05...
CVE-2026-65613
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...
CVE-2026-59655 Apache CloudStack: Unauthenticated OAuth provider client-secret disclosure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authentication plugin while listing OAuth providers. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...
CVE-2026-59657 Apache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJob
Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the database. This issue affects Apache CloudStack: from 4.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or 4.22.1.1 or later, whi...
EUVD-2026-63834
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...
CVE-2026-77648
A flaw was found in OpenStack Glance. A privileged administrator could exploit a vulnerability in the /v2/tasks API by crafting a specific import task. This action bypasses security filtering, enabling the administrator to perform Server-Side Request Forgery SSRF. As a result, an attacker could...