32708 matches found
CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
EUVD-2026-51543
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
CVE-2026-56569 HCL iControl is affected by multiple security vulnerabilities.
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
CVE-2026-56569
Technical details of CVE-2026-56569 are not publicly available in the provided documents. Affected components, root cause, impact, and fixes are not disclosed here. Monitor the referenced sources for updates.
CVE-2026-28144
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144 WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144
The CVE-2026-28144 entry concerns the WordPress WP Maps plugin by Flipper Code, affected up to version 4.9.6. It describes an issue titled “Insertion of Sensitive Information Into Sent Data,” enabling retrieval of embedded sensitive data. The available metrics indicate a CVSS 3.1 base score of 4....
EUVD-2026-51538
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-28144 WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...
CVE-2026-PENDING-AAVISHKAR-1
CVE-2026-PENDING — Aavishkar Institute Management System Br...
WordPress WP Maps plugin <= 4.9.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Maps versions = 4.9.6...
CVE-2026-17567
The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter due to missing validation on a user controlled key. This...
CVE-2026-11770
The CVE affects 389 Directory Server (389-ds-base) with a pre-auth LDAP filter injection in the CleanAllRUV replication status-check extended operation. An unauthenticated attacker can inject LDAP search filters, causing the handler to search cn=config with elevated replication plugin privileges ...
CVE-2026-12376 Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...
CVE-2026-12376 Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint
The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...
CVE-2026-14333
The Demi - One Click Demo Import, Backup & Site Migration WordPress plugin, in versions before 0.0.7 , is vulnerable to unauthenticated sensitive data exposure . The root cause is that the plugin stores full-site backup archives in a publicly accessible location using a predictable filename witho...
WordPress Demi plugin < 0.0.7 - One Click Demo Import, Backup & Site Migration < 0.0.7 - Unauthenticated Sensitive Data Exposure vulnerability
WordPress Demi plugin 0.0.7 - One Click Demo Import, Backup & Site Migration 0.0.7 - Unauthenticated Sensitive Data Exposure vulnerability discovered by Pavan N in WordPress Plugin Demi One Click Demo Import, Backup & Site Migration versions 0.0.7...
CVE-2026-34490: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...
CVE-2026-56569: Exposure of Sensitive System Information to an Unauthorized Control Sphere
HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...
PT-2026-66755
Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...