315578 matches found
CVE-2026-74879 openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint
opensslencrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection...
CVE-2026-74870 openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure
opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...
EUVD-2026-60089
opensslencrypt pip versions = 1.4.7 contain an information exposure vulnerability where the 'hsm fido2-test' and 'hsm onlykey-test' diagnostic commands unconditionally print the full derived hardware pepper as hex to stdout/stderr cryptcli.py, handlehsmcommand. The printed value can persist in...
CVE-2026-74870
openssl_encrypt (pip) versions
EUVD-2026-60082
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...
CVE-2026-74799 SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider...
CVE-2026-74799
SiYuan (note-taking app) before version 3.7.4 registers Go net/http/pprof debug endpoints (e.g., /debug/pprof/heap, goroutine dumps) without authentication whenever the --mode flag is not exactly prod. An unauthenticated network attacker can request these endpoints to extract in-memory secrets, i...
CVE-2026-72234
creationtimestamp| type| source ---|---|--- 2026-08-17 09:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbfubkmiw2m...
MINI-8WMH-J839-H4JF
Bulletin has no description...
CVE-2026-72220
creationtimestamp| type| source ---|---|--- 2026-08-17 09:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbeqjmwxc2y 2026-08-18 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtev2mepvd2j...
CVE-2026-72206
creationtimestamp| type| source ---|---|--- 2026-08-17 08:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbd2szsga25...
CVE-2026-71368
creationtimestamp| type| source ---|---|--- 2026-08-17 08:45:03+00:00| seen| https://jvn.jp/en/jp/JVN58692577 2026-08-20 07:56:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ghtwpknn2k7ry...
CVE-2026-72185
creationtimestamp| type| source ---|---|--- 2026-08-17 08:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtbabimnq325 2026-08-19 02:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfnnfbsz52b...
MINI-6JF4-RJ54-JFW2
Bulletin has no description...
MINI-JP6V-M4FP-H644
Bulletin has no description...
MINI-6GC4-C72W-VFQX
Bulletin has no description...
MINI-V338-J38R-63C8
Bulletin has no description...
MINI-QP5R-9PHJ-VC2X
Bulletin has no description...