Lucene search
+L

121 matches found

Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•32 views

PT-2025-35882

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A possible escalation of privilege exists due to test/debugging code remaining in a production build. This could lead to physical escalation of privilege without requiring additional execution...

8.4CVSS6.6AI score0.0009EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/04 12:00 a.m.•1 views

CVE-2025-36899: Active Debug Code

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.8AI score0.0009EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/03 3:15 p.m.•28 views

CVE-2025-58598

Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through = 1.9.8...

6.6CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/03 2:36 p.m.•7 views

CVE-2025-58598 WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through = 1.9.8...

6.6CVSS5.9AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/03 2:36 p.m.•30 views

CVE-2025-58598

CVE-2025-58598 (Klarna Order Management for WooCommerce) affects the WordPress Klarna plugin up to version 1.9.8. The root cause is insertion of sensitive information into debugging code, enabling retrieval of embedded sensitive data. Public descriptions indicate affected versions are from n/a th...

6.6CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/03 2:36 p.m.•22 views

CVE-2025-58598 WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through = 1.9.8...

6.6CVSS0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/03 12:00 a.m.•13 views

WordPress plugin Klarna Order Management for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.6CVSS6.8AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•3 views

CVE-2025-58598: Insertion of Sensitive Information Into Debugging Code

Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through = 1.9.8...

6.6CVSS5.8AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/03 12:00 a.m.•17 views

PT-2025-35732

Name of the Vulnerable Software and Affected Versions: Klarna Order Management for WooCommerce versions through 1.9.8 Description: Klarna Order Management for WooCommerce is susceptible to a flaw that allows the retrieval of embedded sensitive data due to the insertion of sensitive information in...

6.6CVSS6.1AI score0.00266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•3 views

CVE-2025-53187: Authentication Bypass Using an Alternate Path or Channel

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

9.8CVSS5.8AI score0.00614EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/07/02 2:31 a.m.•24 views

Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)

Overview CONPROSYS HMI System CHS provided by Contec Co.,Ltd. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2025-34080 Insertion of sensitive information into debugging code CWE-215 - CVE-2025-34081 Alex Williams of Converge Technology Solutions...

7.5CVSS6.8AI score0.01255EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/23 8:36 a.m.•17 views

CVE-2024-32912

there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired use of the device with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.4AI score0.00075EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/04 3:34 p.m.•18 views

CVE-2025-0895

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

2.4CVSS6.1AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/02 3:20 p.m.•107 views

CVE-2025-0895

CVE-2025-0895 affects IBM Cognos Analytics Mobile (Android) 1.1. The issue allows information disclosure via debugging code log messages when a user has physical access to the device. Root cause is exposure of sensitive data in debug logs. According to IBM’s Security Bulletin, remediation is to u...

2.4CVSS3.2AI score0.00197EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/02 3:20 p.m.•36 views

CVE-2025-0895 IBM Cognos Mobile information disclosure

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

2.4CVSS0.00197EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•3 views

CVE-2025-0895: Insertion of Sensitive Information Into Debugging Code

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages...

2.4CVSS5.8AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 7:18 p.m.•21 views

CVE-2022-0721

Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3...

8.8CVSS6.8AI score0.01397EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/09 1:15 p.m.•34 views

CVE-2023-49194

Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify Dropshipping WooCommerce importify allows Retrieve Embedded Sensitive Data.This issue affects Importify Dropshipping WooCommerce: from n/a through = 1.0.4...

5.3CVSS0.00546EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•18 views

CVE-2023-49194 WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify Dropshipping WooCommerce importify allows Retrieve Embedded Sensitive Data.This issue affects Importify Dropshipping WooCommerce: from n/a through = 1.0.4...

5.3CVSS8.6AI score0.00546EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:30 a.m.•52 views

CVE-2023-49194 WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Debugging Code vulnerability in importify Importify Dropshipping WooCommerce importify allows Retrieve Embedded Sensitive Data.This issue affects Importify Dropshipping WooCommerce: from n/a through = 1.0.4...

5.3CVSS0.00546EPSS
SaveExploits0References1
Rows per page
Query Builder