29 matches found
Download Monitor <= 4.7.60 - Sensitive Information Exposure
The Download Monitor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.7.60 via REST API. This can allow unauthenticated attackers to extract sensitive data including user reports, download reports, and user data including email, role, id and...
TestRail-files.md5-IAC-scanner
TestRail-files.md5-IAC-scanner Gurock TestRail के संस्करण सर्वर को http:\ या https:\ प्रारूप में इनपुट करें स्क्रिप्ट सर्वर/फ़ाइल स्थान, स्टेटस कोड यदि 500 नहीं है, और पाए गए किसी भी दिलचस्प कीवर्ड को प्रिंट करेगी।...
printix-CVE-2022-30006
CVE-2022-30006 Simple Release | Print Friendly Eine Schwachstelle vom Typ „Exposure of Sensitive Information to an Unauthorized Actor“ und/oder „Exposed Dangerous Method or Function“ in PrintixService.exe, in Kofax Printix’ „Printix Secure Cloud Print Management“, Version 1.3.1156.0 und darunter,...
CVE-2025-24071
CVE-2025-24071 CNA: Microsoft Corporation Pubblicato: 2025-03-11 Aggiornato: 2025-03-13 Titolo: Vulnerabilità di spoofing in Esplora file di Microsoft Windows Descrizione L'esposizione di informazioni sensibili a un attore non autorizzato in Esplora file di Windows consente a un utente...
CVE-2026-61397 Apache CloudStack: OAuth2 Token Cross-Request Leak
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth2 authentication plugin and Google OAuth integration. This issue affects Apache CloudStack: from 4.19.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to...
CVE-2026-58432
CVE-2026-58432 relates to Gitea (code.gitea.io/gitea) and describes missing authorization and an authorization bypass via a user-controlled key, plus incorrect permissions on a critical resource that could expose sensitive information to an unauthorized actor. The CVE is rated with CVSS v3.1 base...
CVE-2026-59507
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...
CVE-2026-59507 Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control
: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...
EUVD-2026-56481
Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...
CVE-2024-39822 Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Sensitive Information Exposure
Sensitive information exposure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow an authenticated user to conduct an information disclosure via network access...
Siemens RUGGEDCOM
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2023-51141
An issue in ZKTeko BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information via the Authentication & Authorization component...
CVE-2024-0978
The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's site privacy feature and view restricted page and post content...
CVE-2024-1209 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via assignments
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads...
Screen SFT DAB 600/C Unauthenticated Information Disclosure (userManager.cgx)
Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...
CVE-2023-21462
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission...
USN-5861-1: Linux kernel (Dell300x) vulnerabilities
It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...
Security Bulletin: Miscellaneous security vulnerabilities in IBM Spectrum Copy Data Management
Summary IBM Spectrum Copy Data Management uses weaker than expected cryptographic algorithms, authentication, and password rules. In addition, IBM Spectrum Copy Data Management is vulnerable to execution of arbitrary commands on the system, obtaining sensitive information, and clickjacking...
CVE-2021-3681
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the buildignore list in "galaxy.yml" include files in the .tar.gz file. This contains sensitive info, such as the user's Ansible Galaxy A...