57 matches found
CVE-2026-103098 GV-Eye Sensitive information exposure in URL query parameter Vulnerability
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...
CVE-2026-103098
The GV-Eye software is vulnerable to sensitive information exposure due to the transmission of a sensitive key within the URL query parameter over an unencrypted HTTP connection. Because the request is sent in plaintext rather than via HTTPS, an attacker capable of monitoring network traffic can ...
EUVD-2026-91148
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...
CVE-2026-103098: Cleartext Transmission of Sensitive Information
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across the network. An attacker with the ability to monitor network traffic could intercept the request and obtain the key...
PT-2026-104063
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A sensitive key is transmitted in the URL over an unencrypted HTTP connection. Because the request uses HTTP instead of HTTPS, the key is sent in plaintext acro...
CVE-2026-75135
UpSignOn for Windows before 7.19.0 retains a backup key in the process memory of UpSignOn.exe even after the vault has been re-locked. A local attacker with low privileges can extract this key, decrypt the encrypted master password backup in v6-vault1.DATA.txt , and subsequently decrypt the entir...
Missing Release Of Resource After Effective Lifetime
Bouncy Castle is vulnerable to Missing Release of Resource after Effective Lifetime. The vulnerability is due to reliance on Java object finalization to zeroise sensitive key material, which can cause pending finalization queues to grow under load, leading to memory exhaustion and prolonged...
CVE-2026-13505 Zeroisation of sensitive key material on garbage collection relies on finalization
In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series, sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by...
CVE-2026-42360: Exposure of Sensitive Information to an Unauthorized Actor
A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking e.g. nested password / token / secret / apikey keys inside a JSON template structure to be bypassed when the rendered field exceeded core maxtemplatedfieldlength: Airflow stringified the structure befor...
EUVD-2020-0012
Malware in sbrugna...
EUVD-2011-4259
Malware in sbrugna...
EUVD-2018-3112
Malware in sbrugna...
EUVD-2022-51010
Malicious code in bioql PyPI...
EUVD-2025-22064
Malicious code in bioql PyPI...
EUVD-2023-27232
Malicious code in bioql PyPI...
EUVD-2023-2165
Malicious code in bioql PyPI...
CVE-2025-4570
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...
CVE-2025-4569
CVE-2025-4569 affects ASUS MyASUS. The issue is an insecure sensitive key storage bug that could allow an unauthenticated actor to obtain a token used to access certain services. CVSSv4.0 vector indicates network attack with low complexity, no privileges required, and high impact on confidentiali...
CVE-2025-4569
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information...
