Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/06/01 9:31 a.m.•21 views

Apache Airflow Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

A bug in Apache Airflow's Variable response masker caused nested-key redaction triggered by secret-suffixed key names like password, token, secret, apikey to be bypassed when the JSON value's nesting depth exceeded the shared secrets masker's recursion limit: the masker returned the original nest...

6.5CVSS5.8AI score0.00523EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2009-4385

Malware in sbrugna...

5CVSS6.4AI score0.0097EPSS
SaveExploits0References4
OSV
OSV
•added 2021/08/30 4:11 p.m.•97 views

GHSA-88F9-7XXH-C688 Cachet configuration leak

Impact Authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. Patches This issue was addressed by improving UpdateConfigCommandHandler and...

8.8CVSS8.5AI score0.05011EPSS
SaveExploits2References5
NVD
NVD
•added 2021/08/28 12:15 a.m.•44 views

CVE-2021-39174

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. This issue was...

8.8CVSS0.05011EPSS
SaveExploits2References3
Prion
Prion
•added 2021/08/28 12:15 a.m.•34 views

Default configuration

Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges User or Admin, can leak the value of any configuration entry of the dotenv file, e.g. the application secret APPKEY and various passwords email, database, etc. This issue was...

6.5CVSS8.4AI score0.05011EPSS
SaveExploits2References3Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2017/04/11 12:00 a.m.•44 views

Adobe Reader DC Nested Variables Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with XS...

4.3CVSS1.7AI score0.03159EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/23 12:00 a.m.•7 views

CVE-2005-0511: Undefined Security Weakness

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter...

7.5CVSS6.4AI score0.35818EPSS
SaveExploits4References1
Rows per page
Query Builder