32334 matches found
CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
CVE-2026-56569
Technical details of CVE-2026-56569 are not publicly available in the provided documents. Affected components, root cause, impact, and fixes are not disclosed here. Monitor the referenced sources for updates.
CVE-2026-56569
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
EUVD-2026-51543
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
CVE-2026-28144
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144 WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144 WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144
The CVE-2026-28144 entry concerns the WordPress WP Maps plugin by Flipper Code, affected up to version 4.9.6. It describes an issue titled “Insertion of Sensitive Information Into Sent Data,” enabling retrieval of embedded sensitive data. The available metrics indicate a CVSS 3.1 base score of 4....
EUVD-2026-51538
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-PENDING-AAVISHKAR-1
CVE-2026-PENDING — Aavishkar Institute Management System Br...
WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Maps versions = 4.9.6...
CVE-2026-17567
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter due to missing validation on a user controlled key. This...
CVE-2026-11770
The CVE affects 389 Directory Server (389-ds-base) with a pre-auth LDAP filter injection in the CleanAllRUV replication status-check extended operation. An unauthenticated attacker can inject LDAP search filters, causing the handler to search cn=config with elevated replication plugin privileges ...
CVE-2026-12376 Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...
CVE-2026-12376 Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...
WordPress Demi plugin < 0.0.7 - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure vulnerability
WordPress Demi plugin 0.0.7 - One Click Demo Import, Backup & Site Migration 0.0.7 - Unauthenticated Sensitive Data Exposure vulnerability discovered by Pavan N in WordPress Plugin Demi One Click Demo Import, Backup & Site Migration versions 0.0.7...
CVE-2026-14333
The Demi - One Click Demo Import, Backup & Site Migration WordPress plugin, in versions before 0.0.7 , is vulnerable to unauthenticated sensitive data exposure . The root cause is that the plugin stores full-site backup archives in a publicly accessible location using a predictable filename witho...
PT-2026-66766
Name of the Vulnerable Software and Affected Versions HCL iControl affected versions not specified Description Sensitive data exposure occurs due to improper web server or application hardening, which allows the public exposure of internal configuration files. Recommendations At the moment, there...
Cisco Secure Firewall Management Center Software Static Credentials (cisco-sa-fmc-static-cred-BET3Cjh)
A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a static, low-privileged account and access sensitive data within the impacted system. This vulnerability is due to th...