WordPress Admin Post Navigation Plugin <= 2.1 is vulnerable to Sensitive Data Exposure

Software Admin Post Navigation Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6549 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d9b047850a91 Credits stealthcopter Required...

WordPress Piotnet Addons For Elementor Plugin <= 2.4.29 is vulnerable to Sensitive Data Exposure

Software Piotnet Addons For Elementor Type Plugin Vulnerable versions = 2.4.29 Fixed in 2.4.30 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-5614 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 44d89541ed39 Credits Webbernaut...

WordPress One Click Close Comments Plugin <= 2.7.1 is vulnerable to Sensitive Data Exposure

Software One Click Close Comments Type Plugin Vulnerable versions = 2.7.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6546 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 20aa54d1deb1 Credits stealthcopter...

U.S. Dept Of Defense: Sensitive data exposure: █████████ candidate resumes/CVs available to download with no authentication through BAC/IDOR/Improper Salesforce config

The sensitive data exposure vulnerability allowed an attacker to download thousands of candidate resumes and other confidential files without authentication through a Salesforce community site...

WordPress Optimize images ALT Text (alt tag) & names for SEO using AI Plugin <= 3.1.1 is vulnerable to Sensitive Data Exposure

Software Optimize images ALT Text alt tag & names for SEO using AI Type Plugin Vulnerable versions = 3.1.1 Fixed in 3.1.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6571 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID...

PT-2024-5818 · Ibm · Ibm Qradar Network Packet Capture

Name of the Vulnerable Software and Affected Versions: IBM QRadar Network Packet Capture version 7.5 Description: The issue is related to the failure to properly enable HTTP Strict Transport Security, which could allow a remote attacker to obtain sensitive information using man-in-the-middle...

WordPress WP Mail SMTP by WPForms Plugin <= 4.0.1 is vulnerable to Sensitive Data Exposure

Software WP Mail SMTP by WPForms Type Plugin Vulnerable versions = 4.0.1 Fixed in 4.1.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6694 Patch priority Low CVSS severity Low 2.7 Developer Claim ownership PSID 45f83918c270 Credits Guus Verbeek...

WordPress Addonify Plugin <= 1.2.16 is vulnerable to Sensitive Data Exposure

Software Addonify Type Plugin Vulnerable versions = 1.2.16 Fixed in 1.2.17 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6560 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d0b06da3556d Credits stealthcopter Required privileg...

Triangle MicroWorks SCADA Data Gateway Information Disclosure Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product developed by Triangle MicroWorks, Inc. and is mainly used for data acquisition and monitoring in industrial automation control systems. Triangle MicroWorks SCADA Data Gateway suffers from an information disclosure vulnerabilit...

The vulnerability of the com.vmware.rvc plugin in the software for managing VMware vCenter Server allows a attacker to disclose sensitive information.

The vulnerability of the com.vmware.rvc plugin in the VMware vCenter Server virtualization infrastructure management software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Document Management System SQL Injection Vulnerability

Document Management System is a document management system. A SQL injection vulnerability exists in Document Management System version 1.0 due to a lack of validation of externally entered SQL statements in parameter anothercont. An attacker can exploit this vulnerability to execute illegal SQL...

Philips Vue PACS (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Philips Equipment : Vue PACS Vulnerabilities : Out-of-bounds Write, Deserialization of Untrusted Data, Uncontrolled Resource Consumption, Improper Privilege Management, Use of Default...

PT-2024-5027 · Unknown · Jumpserver

Name of the Vulnerable Software and Affected Versions: JumpServer versions prior to 3.10.12 JumpServer versions prior to 4.0.0 Description: JumpServer is an open-source Privileged Access Management PAM tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes...

CVE-2024-6336 Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to unauthorized users in GitHub Enterprise Server by exploiting organization ruleset feature. This attack required an organization member to explicitly change the visibility of a depende...

CVE-2024-6336 Security misconfiguration was identified in GitHub Enterprise Server that allowed sensitive data exposure

A Security Misconfiguration vulnerability in GitHub Enterprise Server allowed sensitive information disclosure to unauthorized users in GitHub Enterprise Server by exploiting organization ruleset feature. This attack required an organization member to explicitly change the visibility of a depende...

WordPress SchedulePress Plugin <= 5.1.3 is vulnerable to Sensitive Data Exposure

Software SchedulePress Type Plugin Vulnerable versions = 5.1.3 Fixed in 5.1.4 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6557 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4befd0cb74c1 Credits stealthcopter Required...

WordPress AForms Plugin <= 2.2.6 is vulnerable to Sensitive Data Exposure

Software AForms Type Plugin Vulnerable versions = 2.2.6 Fixed in 2.2.7 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6565 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 25ef6cfd65dd Credits stealthcopter Required privilege...

WordPress Laposta Plugin <= 1.12 is vulnerable to Sensitive Data Exposure

Software Laposta Type Plugin Vulnerable versions = 1.12 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-6574 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e0dffa473d46 Credits stealthcopter Required privilege...

SQL Injection Vulnerability in Yisetong Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-34821)

Yisetong electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal employees from leaking and externa...

WordPress Zephyr Project Manager plugin <= 3.3.99 - Sensitive Data Exposure via Export File vulnerability

Sensitive Data Exposure via Export File vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Zephyr Project Manager versions = 3.3.99...