Lucene search
+L

8937 matches found

Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.20 views

PT-2026-73238

Apache Airflow's secrets masker did not mask var.json Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an isinstancestr guard — so a secret stored as a JSON Variable and referenced in a template via var.json was displayed in cleartext to any user with...

6.5CVSS5.3AI score0.0023EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2026/08/14 1:02 a.m.13 views

SUSE CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS5.4AI score0.00096EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/13 8:17 p.m.13 views

CVE-2026-72648

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

6.5CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 7:13 p.m.11 views

EUVD-2026-58281

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

6.5CVSS5.3AI score0.00281EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/13 7:13 p.m.36 views

CVE-2026-72648

Elastic Cloud on Kubernetes (ECK) has a vulnerability CVE-2026-72648 where a Fleet Server authentication token is written in cleartext into the generated workload specification instead of being mounted from the Kubernetes Secret. This allows principals with access to workload specs in the affecte...

6.5CVSS5.3AI score0.00281EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/13 7:13 p.m.34 views

CVE-2026-72648 Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

6.5CVSS0.00281EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/13 6:57 p.m.7 views

postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

6.5CVSS0.00096EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/08/13 4:03 p.m.8 views

Cleartext Storage in a File or on Disk

Overview Affected versions of this package are vulnerable to Cleartext Storage in a File or on Disk in the pgcrypto process when OpenSSL-disabled ciphers are used. An attacker can access sensitive information and potentially modify data by observing the faulty ciphertext or submitting encrypted...

6.9CVSS6.6AI score0.00096EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/08/13 2:12 p.m.14 views

ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token

Etherpad's device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token in the GET response body Description Etherpad ships an endpoint pair under /tokenTransfer src/node/hooks/express/tokenTransfer.ts that lets a logged-in user move their...

6.8CVSS5.8AI score0.00357EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2026/08/13 2:12 p.m.10 views

NPM: ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token

NPM: epetherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 2.6.0, = 3.0.0...

6.8CVSS5.3AI score0.00357EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/08/13 1:17 p.m.10 views

CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS0.00096EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/13 1:17 p.m.9 views

ALPINE-CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS6.7AI score0.00096EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/13 1:17 p.m.9 views

AZL-95723 CVE-2026-14663 affecting package postgresql 16.14-1

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS6.7AI score0.00096EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/13 1:17 p.m.8 views

UBUNTU-CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS5.5AI score0.00096EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/13 1:17 p.m.18 views

CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS5.3AI score0.00096EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/13 1:00 p.m.11 views

CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS6.7AI score0.00096EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/13 1:00 p.m.15 views

EUVD-2026-57832

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS5.3AI score0.00096EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/13 1:00 p.m.54 views

CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS0.00096EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/08/13 1:00 p.m.11 views

CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS6.7AI score0.00096EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/08/13 1:00 p.m.18 views

CVE-2026-14663

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

6.5CVSS6.7AI score0.00096EPSS
SaveExploits0
Rows per page
Query Builder