Lucene search
+L

13 matches found

Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•2 views

PT-2026-80344

Cloudreve: Information Exposure in GET /api/v4/user/search: SearchActive omits the active-status predicate, leaking inactive/banned account emails in github.com/cloudreve/Cloudreve...

5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•36 views

PT-2026-67653

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the...

5.6AI score0.00346EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/06 7:17 a.m.•15 views

CVE-2025-12139

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

7.5CVSS5.7AI score0.02494EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/05 7:15 a.m.•18 views

CVE-2025-12139

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

7.5CVSS0.02494EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/11/05 6:35 a.m.•269 views

CVE-2025-12139 File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

7.5CVSS0.02494EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/11/05 6:35 a.m.•6 views

CVE-2025-12139 File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...

7.5CVSS5.8AI score0.02494EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/05 12:00 a.m.•28 views

PT-2025-45088

Name of the Vulnerable Software and Affected Versions File Manager for Google Drive – Integrate Google Drive with WordPress versions prior to 1.5.4 Description The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress has a flaw that allows unauthenticated...

7.5CVSS6.4AI score0.02494EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•23 views

WordPress plugin integrate-google-drive 信息泄露漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin integrate-google-drive has an information disclosure vulnerability, the...

7.5CVSS5.7AI score0.02494EPSS
SaveExploits0References6
Veracode
Veracode
•added 2024/04/30 5:59 a.m.•31 views

Email Enumeration Attack

org.keycloak, keycloak-parent is vulnerable to Email Enumeration Attack. The vulnerability allows a logged-in user to enumerate valid account emails...

2.7CVSS6.6AI score0.00766EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/06 1:36 a.m.•18 views

CVE-2023-34352

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails...

5.5AI score0.0064EPSS
SaveExploits0References8
CVE
CVE
•added 2023/09/06 1:36 a.m.•92 views

CVE-2023-34352

CVE-2023-34352 concerns a permissions issue in Apple platforms where sensitive information (user account emails) could be leaked due to inadequate redaction. The issue is addressed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5, iPadOS 16.5, and watchOS 9.5, via enhanced redaction of sensitive data i...

5.3CVSS4.8AI score0.0064EPSS
SaveExploits0References8Affected Software5
Cvelist
Cvelist
•added 2023/09/06 1:36 a.m.•39 views

CVE-2023-34352

A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails...

5.9AI score0.0064EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/07/19 12:00 a.m.•16 views

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an input validation error vulnerability due to insufficient validation of user-supplied input when processing...

5.3CVSS6.8AI score0.00526EPSS
SaveExploits0References4
Rows per page
Query Builder