6927 matches found
EUVD-2014-6713
Malware in sbrugna...
EUVD-2017-12329
Malware in sbrugna...
EUVD-2020-3339
Malware in sbrugna...
WordPress WP Reset plugin <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.log vulnerability
Unauthenticated Sensitive Information Exposure via wf-licensing.log vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WP Reset versions = 2.05...
EUVD-2025-32572
Directory Traversal vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0076-000 Ver 4.00 allows attackers to gain sensitive information...
CVE-2025-58585
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...
CVE-2025-58584
CVE-2025-58584 pertains to credentials transmitted in the URL as parameters in HTTP requests, which can be logged or cached by servers, browsers, or proxies. Connected docs associate this with SICK Enterprise Analytics and SICK Logistic Analytics products and indicate a risk of disclosure of user...
CVE-2025-58584 Plain Text Transmission of Username and Password in the URL
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URLs can be stored in various systems such as server logs, browser histories or proxy servers. As a result, there is a high risk that this sensitive data will be disclosed unintentionally...
PT-2025-40864
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The username and password are sent directly in the URL as parameters within HTTP requests. This practice poses a significant risk of sensitive data disclosure, as URLs may be stored in server logs,...
CVE-2025-60958
Cross Site Scripting XSS vulnerability in EndRun Technologies Sonoma D12 Network Time Server GPS F/W 6010-0071-000 Ver 4.00 allows attackers to gain sensitive information...
CVE-2025-60958
EndRun Technologies Sonoma D12 Network Time Server (GPS) firmware 4.00 (6010-0071-000) is affected by a Cross Site Scripting (XSS) vulnerability. The issue could lead to disclosure of sensitive information. The Tenable.ot/Nessus and other feeds confirm XSS in the D12 appliance; no patch/version r...
PT-2025-40927
Name of the Vulnerable Software and Affected Versions EndRun Technologies Sonoma D12 Network Time Server GPS version 4.00 Description A Cross Site Scripting XSS issue exists in EndRun Technologies Sonoma D12 Network Time Server GPS. Successful exploitation could allow attackers to obtain sensitiv...
CVE-2025-43825
A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.5, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA...
WordPress RestroPress plugin 3.0.0-3.2.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by kr0d in WordPress Plugin RestroPress versions 3.0.0-3.2.1...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the http server port. An attacker can retrieve sensitive integration data, such as email addresses, by sending unauthenticated requests to the listening port on localhost. Note: This is only exploitable if th...
EUVD-2022-42602
Malicious code in bioql PyPI...
EUVD-2023-54754
Malicious code in bioql PyPI...
EUVD-2021-28110
Malicious code in bioql PyPI...