WordPress WP Ultimate CSV Importer Plugin <= 7.9.8 is vulnerable to Sensitive Data Exposure

Software WP Ultimate CSV Importer Type Plugin Vulnerable versions = 7.9.8 Fixed in 7.9.9 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4139 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 438988920d4b Credits István Márton...

WordPress Simple Blog Card Plugin < 1.32 is vulnerable to Sensitive Data Exposure

Software Simple Blog Card Type Plugin Vulnerable versions 1.32 Fixed in 1.32 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e0b1d4664953 Credits N/A Required privilege Subscriber...

Control ID IDSecure Security Vulnerability

Control ID IDSecure is software from Control ID that controls access to personnel and vehicles in companies of all sizes. A security vulnerability exists in Control ID IDSecure version 4.7.26.0 and prior versions, which stems from the presence of a number of API routes, thereby disclosing sensiti...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

Code injection

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36983

Technical details about CVE-2023-36983 are not publicly provided in the connected documents. No explicit affected versions, root cause, impact, or remediation are present here. Monitor for updates and additional disclosures.

PT-2023-25763 · Unknown · Lavalite Cms

Name of the Vulnerable Software and Affected Versions: LavaLite CMS version 9.0.0 Description: The issue concerns Sensitive Data Exposure. Recommendations: For LavaLite CMS version 9.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2023-36983

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure...

CVE-2023-36984

CVE-2023-36984 affects LavaLite CMS v9.0.0. The provided documents identify a sensitive data exposure due to lack of access restrictions (no explicit exploit details). Public sources indicate this is a vulnerability in LavaLite CMS 9.0.0 with no confirmed fix in the supplied materials; one entry ...

CVE-2020-4868

IBM TRIRIGA 3.0, 4.0, and 4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 190744...

WordPress Video Conferencing with Zoom Plugin <= 4.2.1 is vulnerable to Sensitive Data Exposure

Software Video Conferencing with Zoom Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3947 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 55e6071a651c Credits Lana Codes...

The vulnerability of the validate_path_is_safe() function in the machine learning lifecycle management platform allows a attacker to disclose sensitive information or execute arbitrary files.

The vulnerability of the validatepathissafe function in the machine learning model lifecycle management platform exists due to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

Vulnerabilities fixed in IBM Cognos

IBM has fixed vulnerabilities in Cognos Analytics. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or to launch a Cross-Site-Scripting XSS attack. Such an attack can lead to execution of arbitrary code in the context of the victim's browser, or access to sensitiv...

CVE-2023-38195

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when external SQL Server or PostgreSQL metadata storage is used. Exploitation can only occur from a high-privileged user account...

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to sensitive data exposure due to Apache CXF (CVE-2022-46363)

Summary A security vulnerability has been identified and addressed in Apache CXF shipped with IBM Sterling Global Mailbox. Vulnerability Details CVEID:CVE-2022-46363 DESCRIPTION: Apache CXF could allow a remote attacker to obtain sensitive information, caused by a flaw when the CXFServlet is...