Lucene search
+L

24 matches found

NVD
NVD
•added 2026/08/27 8:18 p.m.•18 views

CVE-2026-81530

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS0.00097EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/27 6:32 p.m.•18 views

EUVD-2026-67214

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score0.00097EPSS
SaveExploits0References2
Mend
Mend
•added 2026/08/27 6:32 p.m.•9 views

CVE-2026-81530

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score0.00097EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/08/27 6:32 p.m.•7 views

CVE-2026-81530 KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•49 views

PT-2026-82744

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

6.8CVSS5.8AI score0.00097EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/12 8:14 p.m.•45 views

CVE-2026-19502 Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...

6.8CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/12 8:14 p.m.•76 views

CVE-2026-19502

CVE-2026-19502 affects MongoDB SQL Schema Builder CLI. The issue is insufficient redaction of sensitive startup/connection configuration in diagnostic output (stdout and log files), allowing a local user with access to terminals or logs to view authentication material. The documentation provided ...

6.8CVSS5.8AI score0.00124EPSS
SaveExploits0References1Affected Software1
MongoDB
MongoDB
•added 2026/08/12 8:14 p.m.•21 views

Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnosti...

6.8CVSS5.8AI score0.00124EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/04/22 5:16 p.m.•23 views

CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS0.00137EPSS
SaveExploits1References1
Mend
Mend
•added 2026/04/22 4:08 p.m.•7 views

CVE-2026-35371

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

4.8CVSS5.9AI score0.00137EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/22 12:00 a.m.•5 views

CVE-2026-35371: User Interface (UI) Misrepresentation of Critical Information

The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effective UID differ. The implementation incorrectly uses the effective GID instead of the effective UID when performing a name lookup for the effective user. This results in misleadi...

3.3CVSS5.9AI score0.00137EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/12/13 3:58 p.m.•19 views

CVE-2025-36744

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/12 3:15 p.m.•19 views

CVE-2025-36744

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS0.00162EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/12/12 3:15 p.m.•20 views

CVE-2025-36744

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/12 3:05 p.m.•48 views

CVE-2025-36744 SolarEdge SE3680H - Information Exposure during Bootloader Loop

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS0.00162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/12 3:05 p.m.•15 views

CVE-2025-36744 SolarEdge SE3680H - Information Exposure during Bootloader Loop

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/12 3:05 p.m.•20 views

EUVD-2025-203083

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/12 3:05 p.m.•33 views

CVE-2025-36744

CVE-2025-36744 affects SolarEdge SE3680H hardware. The issue is an unauthenticated disclosure of sensitive information during the bootloader loop: as the device reinitializes and waits for boot instructions, the bootloader emits diagnostic output that can leak operating system information. This d...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•19 views

PT-2025-50935

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•8 views

CVE-2025-36744: Undefined Security Weakness

SolarEdge SE3680H has unauthenticated disclosure of sensitive information during the bootloader loop. While the device repeatedly initializes and waits for boot instructions, the bootloader emits diagnostic output this behavior can leak operating system information...

2.4CVSS5.5AI score0.00162EPSS
SaveExploits0References2
Rows per page
Query Builder