Lucene search
+L

28909 matches found

Cvelist
Cvelist
added 2026/05/12 5:35 p.m.54 views

CVE-2025-46311

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data...

0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 5:35 p.m.12 views

CVE-2025-46311

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data...

5.8AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/12 5:35 p.m.33 views

CVE-2025-46311

Technical details for CVE-2025-46311 are not publicly available in the supplied documents. Monitor for updates from Apple and security advisories to determine affected products, impact, and fixes.

7.5CVSS5.8AI score0.00231EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/05/12 4:58 p.m.7 views

CVE-2026-40374

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00868EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/12 4:58 p.m.14 views

CVE-2026-40379

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.8AI score0.0091EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/05/12 4:35 p.m.61 views

CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

6.8CVSS5.8AI score0.00096EPSS
SaveExploits0
NVD
NVD
added 2026/05/12 3:16 p.m.23 views

CVE-2026-6866

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

8.2CVSS0.00291EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/05/12 2:0 p.m.16 views

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS5.8AI score0.00868EPSS
SaveExploits0
EUVD
EUVD
added 2026/05/12 12:32 p.m.16 views

EUVD-2026-29457

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/12 12:32 p.m.10 views

EUVD-2026-29447

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS5.8AI score0.00092EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/12 11:16 a.m.42 views

CVE-2026-45215

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/12 11:16 a.m.46 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS0.00092EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 11:2 a.m.10 views

CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/12 11:2 a.m.72 views

CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/12 11:2 a.m.37 views

CVE-2026-45215

CVE-2026-45215 affects the WordPress WP EasyPay plugin (wp-easy-pay)

5.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/12 10:51 a.m.6 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS5.8AI score0.00092EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/05/12 10:51 a.m.71 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS0.00092EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/12 8:39 a.m.10 views

BIT-CILIUM-OPERATOR-2026-41520 Cillium exposes sensitive information included in the cilium-bugtool debug archive

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been...

7.9CVSS5.7AI score0.00077EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/12 6:31 a.m.16 views

EUVD-2026-29377

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file...

4.4CVSS5.8AI score0.00108EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/12 3:31 a.m.7 views

CVE-2026-7257

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file...

4.4CVSS5.8AI score0.00108EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder