Siemens SIMATIC S7-1500 CPU 1518 MFP Exposure of Sensitive Information Due to Incompatible Policies (CVE-2025-39955)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505852; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

PT-2026-65178

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description An out-of-bounds read occurs due to insufficient bounds checking, which could allow an application to access sensitive...

CVE-2026-51078

Technical details about CVE-2026-51078 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE and ENISA sources for affected versions, impact, and remediation.

PT-2026-65247

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A privacy issue exists where an app may be able to leak sensitive user information. This was addressed by removing the...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

PT-2026-65179

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update macOS...

CVE-2021-32085

Summary (CVE-2021-32085): Quest KACE Systems Deployment Appliance (SMA) 11.0.273 is affected by a credential-related issue where default user credentials are installed with a known MySQL password (box747) for the report and R1 accounts. This enables remote attackers to gain privileged access to t...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

PT-2026-65256

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue exists where an application may be able to access sensitive user data. This was addressed by implementing...

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...

PT-2026-65209

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.6 Description An access issue exists where an application may be able to access sensitive user data. This is addressed by implementing additional sandbox restrictions, which are security mechanisms that isolate...

PT-2026-65162

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue exists due to insufficient validation, which may allow an application to access user-sensitive data...

PT-2026-65187

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 macOS Tahoe versions prior to 26.6 Description An authorization issue exists due to improper state management, which could allow an application to access sensitive user data. Recommendations Update Safari to versi...

PT-2026-65189

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...

VulnCheck KEV: CVE-2025-68686

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability CWE-200 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypas...

PT-2026-65265

This issue was addressed through improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6. An attacker with physical access may be able to access sensitive user data during iPhone Mirroring...

CVE-2026-51077

Dede CMS v5.7.118 is affected by a SQL injection in the sys_sql_query.php component (parameter sqlquery). Remote attackers can obtain sensitive information with network access; no privileges required, no user interaction. Root cause: unsafely handling input in sqlquery parameter. Impact: confiden...

GHSA-2625-RW7M-5Q5X Hubuum client library (Rust): Sensitive data may be exposed through default diagnostics

Summary hubuumclient diagnostics can expose sensitive request, response, import/export, task, delivery, or server-provided data when applications format or log errors and public models. Affected behavior Native reqwest::Error values retain the full request URL. Converting those errors into...

CVE-2026-55729 Loytec LWEB802: Exposure of Sensitive Information in browser localStorage

Exposure of Sensitive Information CWE-200 in LWEB802 browser localStorage in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link...

WordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MapPress Maps for WordPress versions = 2.97.6...