Lucene search
+L

8946 matches found

EUVD
EUVD
added 2026/09/03 10:09 a.m.9 views

EUVD-2026-70378

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

6.9CVSS5.9AI score0.0036EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/03 10:09 a.m.37 views

CVE-2026-15933 Cleartext Storage of Sensitive Credentials in OptimiDoc Server (On-Premise)

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

6.9CVSS0.0036EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-85089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in...

7.1CVSS5.7AI score0.0039EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.20 views

Linux Distros Unpatched Vulnerability : CVE-2026-55857

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog...

5.9CVSS5.5AI score0.00197EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/02 10:50 p.m.6 views

GHSA-76G3-C3X4-CRVX Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...

7.4CVSS5.9AI score0.0016EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/02 8:39 p.m.8 views

CVE-2026-55857

A flaw was found in MariaDB Connector/J. A remote attacker or a man-in-the-middle server can exploit a vulnerability in the PAM dialog authentication mechanism. This flaw allows the attacker to coerce the connector into transmitting account passwords over an insecure connection when default...

5.9CVSS5.8AI score0.00197EPSS
SaveExploits0References9
NVD
NVD
added 2026/09/02 8:17 p.m.7 views

CVE-2026-75137

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked. Attackers can use the PROCESSVMREAD permission to read the memory space of UpSignOn.exe a...

6.9CVSS0.00072EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/02 7:16 p.m.7 views

EUVD-2026-70262

UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the application has been locked. Attackers can use the PROCESSVMREAD permission to read the memory space of UpSignOn.exe a...

6.9CVSS5.8AI score0.00072EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/02 7:15 p.m.7 views

EUVD-2026-70261

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS5.9AI score0.0011EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/02 7:15 p.m.33 views

CVE-2026-75136 UpSignOn < 7.19.0 Biometric Key Exposure via Windows PasswordVault

UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows local attackers to retrieve the biometric unlock key stored in the Windows PasswordVault API without triggering any authentication prompt. Attackers can access the stored biometric key from a...

6.9CVSS0.0011EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/02 6:01 p.m.26 views

CVE-2026-84381

HTTPX2 is a next-generation HTTP client for Python. Prior to 2.10.0 , the underlying httpcore2 library failed to initiate TLS when a WebSocket connection (wss) was routed through a SOCKS5 proxy , because the TLS upgrade condition only recognized the https scheme. As a result, the WebSocket handsh...

8.1CVSS5.8AI score0.00079EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/09/02 2:45 p.m.8 views

CVE-2026-14663

A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...

6.5CVSS6.5AI score0.00096EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/02 1:59 a.m.39 views

firmwalker

firmwalker A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .cr...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/09/01 8:29 p.m.11 views

CVE-2026-84366 Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta"issecure" is...

7.4CVSS5.9AI score
SaveExploits0References5
NVD
NVD
added 2026/09/01 8:17 p.m.6 views

CVE-2026-73748

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further acce...

2.2CVSS0.00109EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.10 views

CVE-2026-73739

A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve sensitive information that was expected to remain protected...

4.4CVSS0.00113EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 8:17 p.m.12 views

CVE-2026-73743

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to gain insight into some data handled by the affected interface. A successful exploit could allow an attacker to gain access to some data in a cleartext format...

3.7CVSS0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:47 p.m.38 views

CVE-2026-73748 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further acce...

2.2CVSS0.00109EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/01 7:47 p.m.8 views

EUVD-2026-69474

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further acce...

2.2CVSS5.8AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/01 7:47 p.m.11 views

CVE-2026-73748 Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer

A vulnerability in the affected interface of HPE Networking Fabric Composer allows an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further acce...

2.2CVSS5.8AI score0.00109EPSS
SaveExploits0References1
Rows per page
Query Builder