32318 matches found
CVE-2026-10764
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
EUVD-2026-89756
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-10764
The BVMS software (versions 4.5 up to 12.3 ) is susceptible to an information disclosure vulnerability. This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data . The vulnerability is characterized by a high CVSS 3.1 base score of 8.7 , reflecting significant imp...
CVE-2026-10764 Information disclosure in BVMS 4.5 up to 12.3
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
CVE-2026-102578
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
CVE-2026-102578
A SQL injection vulnerability exists in the Moodle learning management system. An authenticated attacker who has access to the question bank web service can submit unsanitized input that is directly processed into database queries. This flaw allows the attacker to view, alter, or delete sensitive...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
CVE-2026-94274 YayReviews 1.0.4 - 1.4.0 - Unauthenticated Sensitive Data Disclosure via REST API
The YayReviews WordPress plugin before 1.4.1 does not restrict access to an API route that returns individual customer review records, including reviews still pending moderation, allowing unauthenticated attackers to harvest reviewers' email addresses and other non-public review content...
WordPress YayReviews plugin 1.0.4-1.4.0 - Unauthenticated Sensitive Data Disclosure vulnerability
Unauthenticated Sensitive Data Disclosure vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente, and Iñigo Sánchez Enciso in WordPress Plugin YayReviews versions 1.0.4-1.4.0...
CVE-2026-94274
The YayReviews WordPress plugin, in versions prior to 1.4.1 , contains a vulnerability where it fails to restrict access to an API route designed to return individual customer review records. This oversight allows unauthenticated attackers to harvest sensitive data, including reviewers' email add...
PT-2026-103102
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
PT-2026-103236
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-97261: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
CVE-2026-97240: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-96342: Missing Authorization
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-102578: Improper Neutralization of Special Elements used in an SQL Command
A flaw was found in Moodle. An authenticated attacker with access to the question bank web service can submit unsanitized input directly into database queries, resulting in a SQL Structured Query Language injection vulnerability. This issue could allow an attacker to view, alter, or delete...
PT-2026-103120
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
PT-2026-103248
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...