17766 matches found
CVE-2024-31259
Insertion of Sensitive Information into Log File vulnerability in Searchiq SearchIQ.This issue affects SearchIQ: from n/a through 4.5...
CVE-2024-31245
Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5...
CVE-2024-31245
CVE-2024-31245 is an unauthenticated Information Exposure vulnerability in ConvertKit (WordPress plugin) affecting versions up to 2.4.5. The issue involves insertion of sensitive information into log files, with confidentiality impact rated High. Exploitation details are not provided in the suppl...
CVE-2024-31259
CVE-2024-31259 relates to the SearchIQ WordPress plugin and corresponds to an Insecure Information Exposure issue described as an Unauthenticated Sensitive Information Exposure in public advisories. The affected product is SearchIQ with a stated impact through version 4.5 (i.e., up to 4.5). The p...
CVE-2024-3235 Essential Grid <= 3.1.1 - Unauthenticated Private Post Disclosure
The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...
Esri Portal for ArcGIS Path Traversal Vulnerability
Esri Portal For ArcGIS is a component of esri that allows maps, scenes, applications, and other geographic information to be shared with others within an organization. A path traversal vulnerability exists in Esri Portal for ArcGIS that stems from the program failing to properly filter for specif...
ROS-20240410-05
The vulnerability of the Moby containerization software tool is related to the lack of validation of received requests. no validation of received requests. Exploitation of the vulnerability could allow an intruder, acting remotely, to gain unauthorized access to protected information...
CVE-2024-3514
Rejected reason: DUPLICATE Please use CVE-2024-1846 instead...
CVE-2024-3545
Improper permission handling in the vault offline cache feature in Devolutions Remote Desktop Manager 2024.1.20 and earlier on windows and Devolutions Server 2024.1.8 and earlier allows an attacker to access sensitive informations contained in the offline cache file by gaining access to a compute...