Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/11/01 6:30 a.m.•13 views

EUVD-2025-37421

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data REST API endpoint in all versions up to, and including, 0.3. This makes it possible for authenticated attackers, with...

4.3CVSS5.1AI score0.00195EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/14 7:15 p.m.•11 views

CVE-2021-46766

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

5.5CVSS5.8AI score0.00228EPSS
SaveExploits0References3
Prion
Prion
•added 2023/11/14 7:15 p.m.•25 views

Input validation

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality...

1.7CVSS6.8AI score0.00228EPSS
SaveExploits0References3Affected Software28
SUSE CVE
SUSE CVE
•added 2023/02/15 5:34 a.m.•8 views

SUSE CVE-2013-5745

The vinoserverclientdatapending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error causes the connection to close during authentication, which allows remote attackers to cause a denial ...

7.1CVSS6.9AI score0.0872EPSS
SaveExploits5References7
Positive Technologies
Positive Technologies
•added 2022/06/29 12:00 a.m.•2 views

PT-2022-37675

Уязвимость встроенного программного обеспечения Wi-Fi роутеров NETGEAR XR450 и XR500 связана с непринятием мер по чистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды путем передачи специально созданных данн...

6.6CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/17 4:58 a.m.•44 views

OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS6.2AI score0.00406EPSS
SaveExploits1References8Affected Software1
Prion
Prion
•added 2021/11/05 11:15 p.m.•34 views

Authorization

Pomerium is an open source identity-aware access proxy. In affected versions changes to the OIDC claims of a user after initial login are not reflected in policy evaluation when using allowedidpclaims as part of policy. If using allowedidpclaims and a user's claims are changed, Pomerium can make...

6.5CVSS8.6AI score0.0086EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2018/09/25 2:29 p.m.•13 views

UBUNTU-CVE-2018-6053

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...

3.3CVSS6.7AI score0.00741EPSS
SaveExploits0References3
Hacker One
Hacker One
•added 2016/02/28 11:02 a.m.•44 views

Udemy: Authentication Data are not Clearing

Authentication Data are not Clearing Authentication Data are not Clearing...

7AI score
SaveExploits0
Prion
Prion
•added 2013/09/16 7:14 p.m.•26 views

Design/Logic Flaw

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

2.1CVSS6AI score0.00406EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder