7990 matches found
PT-2026-103248
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
PT-2026-103236
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
PT-2026-103218
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
PT-2026-103237
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97261: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
CVE-2026-97241: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-97240: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...
CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal
Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...
CVE-2026-86450
The DetaWix Mobile Web Portal by Parla Auto Automotive Trading Limited Company is vulnerable to a Sensitive Data Exposure issue in versions before v1.0.19 . This vulnerability allows for Accessing Functionality Not Properly Constrained by ACLs , which can result in the exposure of sensitive infor...
WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin BackupEase versions = 2.2.2...
WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin StifLi Backup Tools versions = 2.2.7...
Insufficient Technical Documentation
Apache Tomcat is vulnerable to Insufficient Technical Documentation. The vulnerability is due to insufficient security configuration guidance, which could allow an administrator to deploy Tomcat with an insecure EncryptInterceptor configuration and potentially expose protected cluster communicati...
Security update for erlang27
This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...
WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin WPMobile.App versions = 11.83...
CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...
CVE-2026-82372 Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a
Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions before 3.0.1a results in pre-shared keys being recorded in application logs. Individuals with read access to system log files or support bundles can view these credentials, leading to the...
CVE-2026-82372
Brocade SANnav versions prior to 3.0.1a are vulnerable to improper handling of sensitive data during IPsec policy creation and modification. This flaw causes pre-shared keys to be recorded in application logs, potentially exposing credentials used to secure network tunnels to individuals with rea...