Lucene search
+L

32704 matches found

attackerkb
attackerkb
•added 2026/08/10 7:43 a.m.•23 views

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

6.9CVSS5.8AI score0.00167EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/10 7:43 a.m.•121 views

CVE-2026-21080

The CVE-2026-21080 affects Smart Switch prior to version 3.7.72.6. It stems from cleartext storage of sensitive information, allowing adjacent attackers to access data. Mitigation: upgrade to 3.7.72.6 or later (as described in the provided references).

6.9CVSS5.8AI score0.00167EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/08/10 7:43 a.m.•50 views

CVE-2026-21080

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

6.9CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•24 views

EUVD-2026-55105

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

6.9CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/10 7:43 a.m.•21 views

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS5.8AI score0.00098EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•31 views

EUVD-2026-55104

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS5.8AI score0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/10 7:43 a.m.•60 views

CVE-2026-21079

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

7CVSS0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/10 7:43 a.m.•53 views

CVE-2026-21077

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS0.00133EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/10 7:43 a.m.•22 views

EUVD-2026-55102

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/10 7:43 a.m.•74 views

CVE-2026-21077

Samsung Health is affected by CVE-2026-21077 due to incorrect authorization prior to version 7.0.0, allowing local attackers to access sensitive information. Affected software: Samsung Health (versions

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/08/10 7:42 a.m.•78 views

CVE-2026-21076

Samsung Health prior to version 7.0.0 has an incorrect authorization flaw that could allow local attackers to access sensitive information. Affected product: Samsung Health (pre-7.0.0). Root cause: improper access control enabling local access to data. Reported CVSS v4.0 base score 6.9 (MEDIUM) w...

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/08/10 7:42 a.m.•23 views

CVE-2026-21076

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS5.8AI score0.00133EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/10 7:41 a.m.•24 views

EUVD-2026-55095

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

5.1CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/10 7:41 a.m.•52 views

CVE-2026-21070

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

5.1CVSS0.00207EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/10 7:14 a.m.•19 views

WordPress iCARRY plugin <= 2.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Legion Hunter in WordPress Plugin iCARRY versions = 2.9...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/10 7:11 a.m.•24 views

WordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by adhikara13 in WordPress Plugin WooCommerce Appointments versions = 5.3.8...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2026/08/10 6:00 a.m.•97 views

CVE-2026-19074

The Advanced Classifieds & Directory Pro WordPress plugin (versions prior to 3.4.3 ) is vulnerable to unauthenticated sensitive information exposure. This issue occurs via the AJAX action acadp_public_custom_fields_listings, which allows unauthorized actors to disclose non-public listing custom f...

5.3CVSS5.9AI score0.00173EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/10 6:00 a.m.•22 views

CVE-2026-19074

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

5.2AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/10 6:00 a.m.•82 views

CVE-2026-17542

The File Manager WordPress plugin (versions before 6.9.1 ) contains a vulnerability in the bitapps_fm_connector endpoint. Due to a missing capability check , any authenticated user, such as a subscriber , can browse the entire WordPress installation directory. This allows attackers to download sp...

7.5CVSS5.9AI score0.00416EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/10 6:00 a.m.•25 views

CVE-2026-17542 Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector

The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directory and download files of certain types from it, including...

5.9AI score0.00416EPSS
SaveExploits0References1
Rows per page
Query Builder