SMTP WP Plugin Directory Listing

The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and its content available for access. id: CVE-2020-35234 info: name: SMTP WP Plugin Directory Listing author: PR3R00T severity: high description: The WordPress Easy WP SMTP Plugin has its log folder remotely accessible and i...

CVE-2026-47832 OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs

The vulnerability lies in the way application credentials are handled within the BOSH deployment. bosh-openstack-cpi-release: all versions from v55 to v55.0.4 inclusive...

CVE-2026-47832

The bosh-openstack-cpi-release component (versions v55 to v55.0.4 inclusive) is vulnerable to an information leak due to improper handling of application credentials. The application_credential_secret used to authenticate with OpenStack is inadvertently written in cleartext within the BOSH task d...

CVE-2026-47832 - OpenStack Application Credentials Logged in Cleartext to BOSH Debug Logs | Cloud Foundry

Severity High CVSS Score 7.3 High CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H Vendor CloudFoundry Foundation Versions Affected bosh-openstack-cpi-release All versions from v55 to v55.0.4 inclusive Description The vulnerability lies in the way application credentials are handle...

CVE-2026-21811 Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on the pipeline configuration, these secrets could be exposed through task outputs, debug logs, environment variable...

Trigger.dev: Trigger CLI Debug Deployment Logs Expose Resolved Environment Secret Values

Affected version: trigger.dev 4.5.3 4.5.6 was advertised by the CLI but was not tested. A staging dry-run executed with "trigger.dev deploy --env staging --dry-run --log-level debug". The debug output logged the complete build-worker options object. Its "envVars" property contained unredacted...

Linux Distros Unpatched Vulnerability : CVE-2026-110855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in...

CVE-2026-110855 GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

CVE-2026-110855

The GitPython library before version 3.2.0 is vulnerable to an information disclosure flaw. The issue exists because the Repo._clone() function fails to set expand_vars=False when calling Git.polish_url(), allowing the expansion of environment variables via separate_git_dir. An attacker can craft...

SUSE Linux Enterprise Server Permission Licensing and Access Control Vulnerabilities

SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, and openSUSE Leap 16.1 have vulnerabilities related to permission permissions and access control. These vulnerabilities stem from the debug logs created by the sdbootutil script, which are globally readable. This cou...

CVE-2026-110855: Exposure of Sensitive Information to an Unauthorized Actor

GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separategitdir in Repo.clone, which omits expandvars=False when calling Git.polishurl. Attackers can craft a .gitmodules submodule name containing variabl...

EUVD-2026-96020

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

CVE-2026-22061 CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

CVE-2026-22061

Trident versions v25.02.1 through v26.06.1 are vulnerable to a Debug Log Information Disclosure vulnerability (CWE-215 ). An authenticated attacker who gains access to the system's debug logs could potentially view highly sensitive information, specifically LUKS passphrases or SMB Active Director...

CVE-2026-22061 CVE-2026-22061 Debug Log Information Disclosure Vulnerability in Trident

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

PT-2026-109328

Name of the Vulnerable Software and Affected Versions Trident versions v25.02.1 through v26.06.1 Description An authenticated attacker with access to debug logs can view sensitive information, including LUKS passphrases and SMB Active Directory credentials. Recommendations Update Trident to a...

CVE-2026-22061: Insertion of Sensitive Information Into Debugging Code

Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB Active Directory credentials...

NetApp Trident debugging information leakage vulnerability

The NetApp Trident versions from v25.02.1 to v26.06.1 have a vulnerability involving debugging information leakage. This vulnerability stems from the exposure of sensitive information in the debug logs, which may allow attackers who are authenticated and have access to the debug logs to view LUKS...

Trigger.dev: Trigger CLI debug deployment logs expose resolved environment secret values

Affected version: trigger.dev 4.5.3 4.5.6 was advertised by the CLI but was not tested. A staging dry-run executed with trigger.dev deploy --env staging --dry-run --log-level debug. The debug output logged the complete build-worker options object. Its envVars property contained unredacted values...