Lucene search
+L

22164 matches found

OSV
OSV
•added 2026/02/04 3:16 p.m.•16 views

CVE-2025-69618

An arbitrary file overwrite vulnerability in the file import process of Tarot, Astro & Healing v11.4.0 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

6.5CVSS6.3AI score0.00392EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/04 3:02 p.m.•8 views

CVE-2026-20730 BIG-IP Edge Client for Windows vulnerability

A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain access to sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/04 1:20 p.m.•17 views

CVE-2025-11598

In mObywatel iOS application an unauthorized user can use the App Switcher to view the account owner's personal information in the minimized app window, even after the login session has ended reopening the app would require the user to log in. The data exposed depends on the last application view...

1CVSS5.4AI score0.00175EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/04 12:31 p.m.•21 views

GHSA-5W5R-8XC6-2XHW Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 1.7.1. An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized users to retrieve restricted o...

8.7CVSS8AI score0.00687EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/02/04 12:31 p.m.•26 views

Apache Answer Exposure of Private Personal Information to an Unauthorized Actor vulnerability

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 1.7.1. An unauthenticated API endpoint incorrectly exposes full revision history for deleted content. This allows unauthorized users to retrieve restricted o...

7.5CVSS8AI score0.00687EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
•added 2026/02/04 12:31 p.m.•8 views

Exposure of Private Personal Information to an Unauthorized Actor

Overview Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the /revisions endpoint, which exposes the full revision history of deleted content to unauthenticated attackers. Remediation Upgrade...

8.7CVSS8AI score0.00687EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/04 12:31 p.m.•6 views

Exposure of Private Personal Information to an Unauthorized Actor

Overview Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the /revisions endpoint, which exposes the full revision history of deleted content to unauthenticated attackers. Remediation Upgrade...

8.7CVSS8AI score0.00687EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/04 9:15 a.m.•19 views

CVE-2025-15482

The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 via 'chapaproceed' WooCommerce API endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including t...

5.3CVSS0.00317EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/04 9:14 a.m.•41 views

CVE-2026-1622

Neo4j Enterprise and Community editions prior to 2026.01.3 and 5.26.21 are affected by CVE-2026-1622. The vulnerability stems from the obfuscate_literals setting in query logs failing to redact error information, allowing a user with access to local log files to view unredacted data when queries ...

4.8CVSS5.8AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/04 8:25 a.m.•20 views

EUVD-2026-5510

The SIBS woocommerce payment gateway plugin for WordPress is vulnerable to time-based SQL Injection via the ‘referencedId’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...

4.9CVSS5.8AI score0.00375EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/04 8:25 a.m.•45 views

CVE-2025-15482 Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure

The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 via 'chapaproceed' WooCommerce API endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including t...

5.3CVSS0.00317EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/04 8:25 a.m.•40 views

CVE-2025-15482

CVE-2025-15482 affects the WordPress plugin Chapa Payment Gateway for WooCommerce . Multiple sources confirm a vulnerability in all versions up to and including 1.0.3 where the 'chapa_proceed' WooCommerce API endpoint exposes sensitive information, enabling unauthenticated attackers to retrieve d...

5.3CVSS5.8AI score0.00317EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/04 8:25 a.m.•11 views

EUVD-2025-206796

The Chapa Payment Gateway Plugin for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 via 'chapaproceed' WooCommerce API endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including t...

5.3CVSS5.3AI score0.00317EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/04 3:15 a.m.•32 views

CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

3.3CVSS5.3AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/04 2:16 a.m.•19 views

CVE-2025-69621

An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

8.1CVSS0.00537EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/04 12:00 a.m.•9 views

CVE-2025-69621

An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

6.2AI score0.00537EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/02/04 12:00 a.m.•46 views

CVE-2025-69621

An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

0.00537EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/04 12:00 a.m.•22 views

EUVD-2025-206821

An arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95 allows attackers to overwrite critical internal files, potentially leading to arbitrary code execution or exposure of sensitive information...

6.2AI score0.00537EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/04 12:00 a.m.•41 views

CVE-2025-69621

The Comic Book Reader application, developed by Android Tools , version 1.0.95 is affected by an arbitrary file overwrite vulnerability within its file import process . This flaw stems from an improper limitation of a pathname to a restricted directory , which allows an attacker to overwrite crit...

8.1CVSS6.4AI score0.00537EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•24 views

Android Tools Comic Book Reader 安全漏洞

Android Tools Comic Book Reader is a comic reading app developed by the Russian company Android Tools. Version 1.0.95 of Android Tools Comic Book Reader contains a security vulnerability. This vulnerability stems from an issue with file import processes, where arbitrary files can be overwritten,...

8.1CVSS6.1AI score0.00537EPSS
SaveExploits0References5
Rows per page
Query Builder