6937 matches found
CVE-2023-25016
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor...
WordPress Ajax Search Lite Plugin <= 4.10.3 is vulnerable to Sensitive Data Exposure
Software Ajax Search Lite Type Plugin Vulnerable versions = 4.10.3 Fixed in 4.11 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2022-38456 Patch priority Medium CVSS severity Medium 4.3 Developer WPdreams PSID 59c3957625b5 Credits István Márton Required...
CVE-2021-37234
Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API...
jeecg 安全漏洞
jeecg is a software application. An intelligent development platform based on a code generator. A security vulnerability exists in jeecg-boot version 2.4.5, which stems from an insecure permission setting. An attacker can exploit the vulnerability to gain escalated privileges and view sensitive...
IBM App Connect Enterprise 加密问题漏洞
IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing industry-trusted IBM...
CVE-2023-22611
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 formerly known as...
CVE-2022-30421
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...
AKINDO SUSHIRO 日志信息泄露漏洞
AKINDO SUSHIRO 寿司郎 is a sushi take-out software from the Japanese company AKINDO SUSHIRO. A security vulnerability exists in AKINDO SUSHIRO that originates from exporting sensitive information to a log file...
WordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure
Software WP Client Reports Type Plugin Vulnerable versions = 1.0.16 Fixed in 1.0.17 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-23978 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1a6f275a92fe Credits Rafshanzani Suhada...
Oracle WebLogic Server 安全漏洞
Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...
ptome SQL注入漏洞
ptome is an application. A SQL injection vulnerability exists in ptome. An attacker could exploit this vulnerability to obtain sensitive database information...
WordPress Freesoul Deactivate Plugins – Plugin manager and cleanup Plugin <= 1.9.4.0 is vulnerable to Sensitive Data Exposure
Software Freesoul Deactivate Plugins – Plugin manager and cleanup Type Plugin Vulnerable versions = 1.9.4.0 Fixed in 1.9.4.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-22687 Patch priority Low CVSS severity Low 3.7 Developer Jose Mortellaro PSID...
WordPress Mega Main Menu Plugin <= 2.2.2 is vulnerable to Sensitive Data Exposure
Software Mega Main Menu Type Plugin Vulnerable versions = 2.2.2 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE N/A Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID f8d7f453705f Credits indoushka Required privilege...
PT-2023-18428 · Openam Consortium · Openam Web Policy Agent
Name of the Vulnerable Software and Affected Versions: OpenAM Web Policy Agent OpenAM Consortium Edition affected versions not specified Description: The issue is related to improper URL parsing, leading to a path traversal vulnerability. A crafted URL may be evaluated incorrectly, potentially...
CVE-2022-38205 Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)
In some non-default installations of Esri Portal for ArcGIS versions 10.9.1 and below, a directory traversal issue may allow a remote, unauthenticated attacker to traverse the file system and lead to the disclosure of sensitive data not customer-published content...
CVE-2022-45895
Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie findable in HTML source code for Default.aspx in some situations and the WhoAmI endpoint e.g., path disclosure...
PT-2022-28048 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue concerns the exposure of sensitive user information, including names, email, role, and OpenID, to an authenticated user. This is due to improper removal of sensitive information...
CVE-2022-44014
Summary: CVE-2022-44014 affects Simmeth Lieferantenmanager (pre-5.6). The API design flaw in /DS/LM_API/api/SelectionService/GetPaggedTab allows a user to fetch arbitrary SQL tables, leaking all user passwords and MSSQL hashes. The issue originates from the API’s access control/validation, enabli...
