Lucene search
+L

398930 matches found

Patchstack
Patchstack
•added 2026/10/13 10:57 a.m.•13 views

WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...

7.5CVSS5.8AI score0.00238EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/10/13 10:45 a.m.•10 views

CVE-2026-109252

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...

6CVSS5.8AI score0.00285EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/13 10:17 a.m.•13 views

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...

5.4CVSS0.00142EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 10:17 a.m.•13 views

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...

9.1CVSS0.00477EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/13 9:19 a.m.•8 views

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...

5.4CVSS5.5AI score0.00142EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 9:19 a.m.•18 views

EUVD-2026-98402

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...

5.4CVSS5.5AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 9:19 a.m.•42 views

CVE-2026-89204

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...

5.4CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 9:19 a.m.•22 views

CVE-2026-89204

A vulnerability exists in RUGGEDCOM CROSSBOW (all versions

5.4CVSS5.5AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 9:18 a.m.•21 views

CVE-2026-63354

Affected devices fail to properly validate and sanitize visual marker data within imported CSV trace files before rendering it on the Trace page . This vulnerability allows an attacker to use social engineering to trick an authorized user with "Read diagnostics" rights into importing a malicious ...

9.6CVSS6.2AI score0.00314EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 9:18 a.m.•12 views

EUVD-2026-98379

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...

9.1CVSS5.9AI score0.00477EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/13 9:18 a.m.•10 views

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...

9.1CVSS5.9AI score0.00477EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/13 9:18 a.m.•40 views

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...

9.1CVSS0.00477EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/13 9:18 a.m.•25 views

CVE-2026-44415

Affected systems fail to properly restrict access to internal APIs and paths for authenticated users. This vulnerability, associated with CWE-35 (Path Traversal) , allows an authenticated remote attacker to access sensitive internal information. In a worst-case scenario, this access could be leve...

9.1CVSS5.9AI score0.00477EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/13 9:17 a.m.•17 views

CVE-2026-108489

Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Active Products Tables for WooCommerce: from n/a through 2.1.3...

5.3CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 9:17 a.m.•12 views

CVE-2026-106598

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

5.3CVSS0.00187EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 8:49 a.m.•14 views

CVE-2026-106598

The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...

5.3CVSS5.7AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 8:49 a.m.•37 views

CVE-2026-106598 WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

5.3CVSS0.00187EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/13 8:49 a.m.•8 views

CVE-2026-106598 WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

5.3CVSS5.7AI score0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 8:49 a.m.•11 views

EUVD-2026-98372

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through 5.2.8...

5.3CVSS5.7AI score0.00187EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/13 8:49 a.m.•18 views

WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder