3225 matches found
Spring MVC Framework - Local File Inclusion
Spring MVC Framework versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported are vulnerable to local file inclusion because they allow applications to configure Spring MVC to serve static resources e.g. CSS, JS, images. A malicious user can send a request using a...
WordPress Passster plugin < 4.3.6 - Unauthenticated Protected Content Disclosure vulnerability
Unauthenticated Protected Content Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Passster versions 4.3.6...
KLA91188 OSI vulnerability in Mozilla Firefox
Information disclosure vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories MFSA2026-73 Exploitation CVE list CVE-2026-18809 high Solution Update to the latest version Download Mozilla Firefox Impacts OSI...
The vulnerability of the FrodoEngine.Java file in the Bouncy Castle cryptographic library for the Java platform allows a hacker to disclose protected information.
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library relates to the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
PT-2026-62411
Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to infer the values of excluded columns by crafting subset where clause conditions against shape responses. Attackers can observe whether subset where conditions match rows to deduc...
PT-2026-62106
MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metadata belonging to other users by adding arbitrary media tokens to their own playlist without access control checks. Attackers can issue a PUT request to the playlist API...
PT-2026-62000
Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 7.17.0 Confluence Data Center version 7.19.0 Confluence Data Center version 8.5.0 Confluence Data Center version 8.9.0 Confluence Data Center version 9.0.1 Confluence Data Center version 9.1.0 Confluence Data...
CVE-2026-56171 Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
EUVD-2026-44918
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...
PT-2026-60474
HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding its internal file structure and directory paths through unhandled error messages, system logs, or debugging output, which could allow a...
EUVD-2026-44112
Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network...
CVE-2026-56186 Windows Secure Channel Information Disclosure Vulnerability
...
CVE-2026-54116 Microsoft SQL Server Information Disclosure Vulnerability
...
CVE-2026-55139
Technical details for CVE-2026-55139 are not publicly available in the provided documents. Available sources mention exposure in Microsoft Office but do not specify affected products, versions, root cause, or remediation. Monitor for official updates.
CVE-2026-55042 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-55028 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-55027 Microsoft Office Information Disclosure Vulnerability
...
CVE-2026-48580 Microsoft Excel Information Disclosure Vulnerability
...