6940 matches found
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PT-2025-23550 · Weblaudos · Weblaudos
Name of the Vulnerable Software and Affected Versions: WebLaudos version 24.2 04 Description: A Directory Traversal issue allows a remote attacker to obtain sensitive information via the id parameter. This enables the attacker to access confidential data. Recommendations: For WebLaudos version 24...
django-helpdesk Allows Sensitive Data Exposure
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
GHSA-M4JX-M5HG-QRXX django-helpdesk Allows Sensitive Data Exposure
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PYSEC-2025-44
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PYSEC-2025-44
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PT-2025-23364 · Unknown · Django-Helpdesk
Name of the Vulnerable Software and Affected Versions: django-helpdesk versions prior to 1.0.0 Description: The issue concerns Sensitive Data Exposure due to the use of os.umask0 in models.py. This allows unauthorized access to sensitive information. Recommendations: For versions prior to 1.0.0,...
Django-Helpdesk 安全漏洞
Django-Helpdesk is a Django application in the Django open source. It is used to manage internal helpdesk tickets. A security vulnerability exists in Django-Helpdesk versions prior to 1.0.0, which stems from os.umask0 in models.py leading to the exposure of sensitive data...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...
CVE-2025-48331 WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Vanquish WooCommerce Orders & Customers Exporter allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Orders & Customers Exporter: from n/a through 5.0...
CVE-2025-48331 WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in vanquish WooCommerce Orders & Customers Exporter woocommerce-orders-customers-exporter allows Retrieve Embedded Sensitive Data.This issue affects WooCommerce Orders & Customers Exporter: from n/a through = 5.0...
WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin WooCommerce Orders & Customers Exporter versions = 5.0...
CVE-2025-48381 CVAT has information disclosure via browsable API
Computer Vision Annotation Tool CVAT is an interactive video and image annotation tool for computer vision. In versions starting from 2.4.0 to before 2.38.0, an authenticated CVAT user may be able to retrieve the IDs and names of all tasks, projects, labels, and the IDs of all jobs and quality...
GHSA-CQX4-9VQF-Q3M8 Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Summary This advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to...
Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure
Summary This advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to...
CVE-2025-5257 Predictable Page Indexing Might Lead to Sensitive Data Exposure
SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information. Unauthorized Access to...