Lucene search
+L

8950 matches found

NVD
NVD
added 2026/07/21 6:16 a.m.16 views

CVE-2026-3182

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

4.3CVSS0.00646EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/21 5:30 a.m.43 views

CVE-2026-3182 Sensitive Data Exposure

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

4.3CVSS0.00646EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/21 5:30 a.m.27 views

EUVD-2026-46154

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

4.3CVSS5.2AI score0.00646EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/21 5:30 a.m.64 views

CVE-2026-3182

CVE-2026-3182 affects Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34, with a vulnerability described as cleartext transmission of sensitive information. The CVSS v3.1 base score is 4.3 (Medium), and the issue is network-based with low privileges required and no user interacti...

4.3CVSS5.2AI score0.00646EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/21 12:00 a.m.34 views

PT-2026-61832

Zohocorp ManageEngine Endpoint Central versions before 11.4.2528.34 are affected by cleartext transmission of sensitive information vulnerability...

4.3CVSS5.2AI score0.00646EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/20 9:16 p.m.10 views

CVE-2026-13380

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within the application. No authentication is required to retriev...

9CVSS0.00235EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/20 8:11 p.m.15 views

CVE-2026-13380

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints. The credentials are present in these responses only when SFTP connections have been configured within the application. No authentication is required to retriev...

9CVSS5.5AI score0.00235EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/07/20 8:11 p.m.38 views

CVE-2026-13380

VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 expose cleartext SFTP credentials in HTTP responses of three unauthenticated endpoints when SFTP is configured. An unauthenticated observer can retrieve these credentials and use them to access the corresponding SFTP server. Affected component: SFTP co...

9CVSS5.5AI score0.00235EPSS
SaveExploits0References2Affected Software2
Snyk
Snyk
added 2026/07/19 7:56 a.m.11 views

Cleartext Storage of Sensitive Information

Overview django-blog-zinnia is an A clear and powerful weblog application powered with Django Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the entryprotection.py process. An attacker can access sensitive information by reading cleartext data...

4.8CVSS4.7AI score0.00109EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/19 5:16 a.m.17 views

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00109EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 4:00 a.m.24 views

CVE-2026-16213

Summary of vulnerability (CVE-2026-16213) : In Fantomas42 django-blog-zinnia (up to 0.20), a flaw affects an unknown function in the file zinnia/views/mixins/entry_protection.py (Protected Entry Password Handler). The manipulation leads to the cleartext storage of sensitive information . Exploita...

4.8CVSS4.3AI score0.00109EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/19 4:00 a.m.20 views

EUVD-2026-45424

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00109EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/19 4:00 a.m.15 views

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00109EPSS
SaveExploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/19 4:00 a.m.9 views

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00109EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 4:00 a.m.54 views

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS0.00109EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/19 12:00 a.m.22 views

PT-2026-61047

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entry protection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

4.8CVSS4.3AI score0.00109EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/07/17 2:00 p.m.19 views

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...

5.5CVSS5.4AI score0.00146EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/16 6:37 p.m.13 views

MAL-2026-10710 Malicious code in @equans-services/codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3c5a7e22ef9ecb88e2f6d85ef6132d80098e3e187cbc302de2c45140a5a5f1 This package typosquats @openai/codex under an unofficial scope and ships a postinstall hook package.json line 6: "postinstall": "node setup.js" that...

6.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/16 12:12 p.m.9 views

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...

5.5CVSS6.1AI score0.00146EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/16 12:12 p.m.46 views

CVE-2026-9494

An information disclosure vulnerability in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) allows the secret bearer token to be exposed in a cleartext URL when /usr/lib/apt/apt-helper uses the download-file command. The token is embedded in the URL passed via argv (e.g., bearer:@esm...

5.5CVSS6.1AI score0.00146EPSS
SaveExploits0References1
Rows per page
Query Builder