EUVD-2026-58461

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16859 IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

EUVD-2026-58255

Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature's functionality. This allows privilege escalation and could lead to disclosure of sensitive information th...

CVE-2026-58432 Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea

Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure

A flaw was found in the Apache Camel Vertx Websocket component. This vulnerability allows an unauthenticated remote attacker to inject malicious query parameters into a WebSocket connection. This can lead to Server-Side Request Forgery SSRF, where the server is coerced into making requests to...

CVE-2026-73188

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-13610...

CVE-2026-66463

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-66462

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

CVE-2026-66443

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

CVE-2026-66444

Subscriber Sensitive Data Exposure in Payment Forms for Paystack = 4.0.5 versions...

CVE-2026-66432

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

CVE-2026-28174

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

CVE-2026-19734 IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking

Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus Prospero Flow CRM before 5.4.7 allows authenticated users of any company to read the full sensitive data price, cost, stock, SKU, and barcode of another company's product and t...

EUVD-2026-57908

Unauthenticated Sensitive Data Exposure in KiviCare = 4.5.1 versions...

CVE-2026-73188

CVE-2026-73188 concerns unauthenticated sensitive data exposure in the WordPress KiviCare plugin, versions

CVE-2026-73188

...

EUVD-2026-57882

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-66463

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

CVE-2026-66463

The CVE-2026-66463 entry concerns the WordPress iCARRY plugin, affected versions <= 2.9, with an Unauthenticated Sensitive Data Exposure vulnerability. The available documents specify vulnerable software (iCARRY