Lucene search
K

1921 matches found

EUVD
EUVD
added 2025/12/18 7:22 a.m.4 views

EUVD-2025-204062

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS6.4AI score0.00279EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52019

Name of the Vulnerable Software and Affected Versions WPCenter eRoom versions through 1.5.6 Description A flaw exists in WPCenter eRoom eroom-zoom-meetings-webinar that allows for the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendation...

5.8CVSS6.3AI score0.00163EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52018

Name of the Vulnerable Software and Affected Versions VikBooking Hotel Booking Engine & PMS versions prior to 1.8.3 Description The VikBooking Hotel Booking Engine & PMS software contains a flaw that allows retrieval of embedded sensitive data. This issue relates to the insertion of sensitive...

5.9CVSS6.2AI score0.00268EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.4 views

PT-2025-52164

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

6.9AI score0.00303EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.3 views

AWS SDK for C++ 安全漏洞

AWS SDK for C++ is an open source developer toolkit for C++ by Amazon Web Services A security vulnerability exists in AWS SDK for C++ that stems from a lack of cryptographic key commitment, which could lead to a user with write access to an S3 storage bucket introducing a new EDK that decrypts a...

6CVSS6.5AI score0.00141EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/16 9:31 a.m.4 views

EUVD-2025-203585

Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through = 4.3.2...

5.3CVSS6.4AI score0.0024EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/16 9:31 a.m.2 views

EUVD-2025-203620

Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects Traveler Option Tree: from n/a through = 2.8...

2.7CVSS6.4AI score0.0023EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.1 views

CVE-2025-49300

Insertion of Sensitive Information Into Sent Data vulnerability in shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects Traveler Option Tree: from n/a through = 2.8...

2.7CVSS0.0023EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.8 views

CVE-2025-66125

CVE-2025-66125 affects the Ultimate WordPress Auction Plugin (

5.3CVSS5.8AI score0.0024EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51413

Name of the Vulnerable Software and Affected Versions Nitesh Ultimate Auction versions through 4.3.2 Description A flaw exists in Nitesh Ultimate Auction that allows the retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Nitesh...

5.3CVSS6.3AI score0.0024EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51414

Name of the Vulnerable Software and Affected Versions Fix Media Library versions through 2.0 Description The Fix Media Library wow-media-library-fix component contains a flaw that allows the retrieval of embedded sensitive data. This is due to the insertion of sensitive information into sent data...

6.3AI score0.0024EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/12/12 6:30 p.m.5 views

Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip

An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path e.g., /etc/... or use parent directory traversal ../../.. to escape the restore root when a backup is restored, potentially creating or...

7.2CVSS7.2AI score0.00661EPSS
Exploits0References6Affected Software1
Microsoft CVE
Microsoft CVE
added 2025/12/10 9:2 a.m.5 views

f2fs: fix infinite loop in __insert_extent_tree()

...

5.5CVSS7AI score0.00186EPSS
Exploits0
EUVD
EUVD
added 2025/12/09 6:30 p.m.3 views

EUVD-2025-201958

Insertion of Sensitive Information Into Sent Data vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Retrieve Embedded Sensitive Data.This issue affects Shortcodes and extra features for Phlox theme: from n/a through = 2.17.12...

5.3CVSS6.4AI score0.0024EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2025-202006

Insertion of Sensitive Information Into Sent Data vulnerability in levelfourdevelopment WP EasyCart wp-easycart allows Retrieve Embedded Sensitive Data.This issue affects WP EasyCart: from n/a through = 5.8.11...

6.4AI score0.0024EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:18 p.m.3 views

CVE-2025-63071

Insertion of Sensitive Information Into Sent Data vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Retrieve Embedded Sensitive Data.This issue affects Shortcodes and extra features for Phlox theme: from n/a through = 2.17.15...

5.3CVSS0.0024EPSS
Exploits0References1
NVD
NVD
added 2025/12/09 4:18 p.m.1 views

CVE-2025-62109

Insertion of Sensitive Information Into Sent Data vulnerability in INFINITUM FORM Geo Controller cf-geoplugin allows Retrieve Embedded Sensitive Data.This issue affects Geo Controller: from n/a through = 8.9.4...

5.3CVSS0.0024EPSS
Exploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.5 views

CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS5.5AI score
Exploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.1 views

UBUNTU-CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS5.8AI score0.00324EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-50027

Insertion of Sensitive Information Into Sent Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Retrieve Embedded Sensitive Data.This issue affects EventPrime: from n/a through = 4.2.4.1...

6.9AI score0.00215EPSS
Exploits0References2
Rows per page
Query Builder