Lucene search
+L

32513 matches found

Cvelist
Cvelist
•added 2026/05/12 5:35 p.m.•71 views

CVE-2025-46311

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data...

0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 5:35 p.m.•16 views

CVE-2025-46311

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data...

5.8AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 5:35 p.m.•54 views

CVE-2025-46311

A vulnerability in the Mail component of Apple iOS and iPadOS was caused by an inconsistent user interface issue, which was addressed with improved state management. This flaw could potentially allow an app to access sensitive user data . The issue is fixed in iOS 18.7.3 , iPadOS 18.7.3 , iOS 26....

7.5CVSS5.8AI score0.00231EPSS
SaveExploits0References1Affected Software2
attackerkb
attackerkb
•added 2026/05/12 4:58 p.m.•17 views

CVE-2026-40374

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS6.7AI score0.00995EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/05/12 4:58 p.m.•23 views

CVE-2026-40379

Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.8AI score0.00947EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/12 4:35 p.m.•82 views

CVE-2025-35979

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some IntelR Processors within VMX non-root guest operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a...

6.8CVSS5.7AI score0.00096EPSS
SaveExploits0
NVD
NVD
•added 2026/05/12 3:16 p.m.•43 views

CVE-2026-6866

CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials...

8.2CVSS0.00488EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:00 p.m.•51 views

Microsoft Power Automate Desktop Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network...

6.5CVSS6.7AI score0.00995EPSS
SaveExploits0
EUVD
EUVD
•added 2026/05/12 12:32 p.m.•29 views

EUVD-2026-29457

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/12 12:32 p.m.•28 views

EUVD-2026-29447

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS5.8AI score0.00126EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 11:16 a.m.•56 views

CVE-2026-45215

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS0.0033EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/12 11:16 a.m.•62 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS0.00126EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/05/12 11:02 a.m.•16 views

CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/12 11:02 a.m.•54 views

CVE-2026-45215

CVE-2026-45215 affects the WordPress WP EasyPay plugin (wp-easy-pay)

5.3CVSS5.8AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/12 11:02 a.m.•88 views

CVE-2026-45215 WordPress WP EasyPay plugin <= 4.3.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP EasyPay: from n/a through = 4.3.0...

5.3CVSS0.0033EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/12 10:51 a.m.•14 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS5.8AI score0.00126EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/05/12 10:51 a.m.•85 views

CVE-2026-32684

The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information...

2.9CVSS0.00126EPSS
SaveExploits0References1
osv_bit
osv_bit
•added 2026/05/12 8:39 a.m.•48 views

BIT-CILIUM-OPERATOR-2026-41520 Cillium exposes sensitive information included in the cilium-bugtool debug archive

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.17.15, 1.18.9, and 1.19.3, the output of cilium-bugtool can contain sensitive data when the tool is run against Cilium deployments with WireGuard encryption enabled. This issue has been...

7.9CVSS7.9AI score0.00084EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/12 6:31 a.m.•27 views

EUVD-2026-29377

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file...

4.4CVSS5.8AI score0.00154EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/12 3:31 a.m.•15 views

CVE-2026-7257

UNSUPPORTED WHEN ASSIGNED An insecure storage of sensitive information vulnerability in the configuration file of Zyxel WRE6505 v2 firmware version V1.00ABDV.3C0 could allow a local attacker with administrator privileges to download and decrypt a backup configuration file...

4.4CVSS5.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder