Lucene search
+L

29301 matches found

CVE
CVE
added 2026/08/20 12:00 a.m.20 views

CVE-2026-52021

Affected: 100xdevs CMS v.1.0 exposes sensitive information through middleware.ts and mobile search route.ts components, exploitable remotely. Exploitation details not provided; monitor the gist reference for PoC details.

5.3AI score0.00221EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/19 10:17 p.m.6 views

CVE-2026-76374

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could cause sensitive Active Directory response data to be written to a persistent debug log file by triggering write operations through the app. For more information see Run an acti...

4.3CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 10:17 p.m.5 views

CVE-2026-76379

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user...

4.3CVSS0.00145EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 9:34 p.m.16 views

CVE-2026-76374

In AD LDAP app for Splunk SOAR versions below 2.3.8, a low-privileged user with action-run permissions can trigger write operations that persist sensitive Active Directory response data to a debug log file, causing information disclosure. CVSS 3.1 scores it MEDIUM (4.3). Update to version 2.3.8. ...

4.3CVSS5.3AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 9:08 p.m.33 views

CVE-2026-14978

go-slug v0.4.0-v0.18.2 mishandles Unicode normalization during .terraformignore matching (CWE-176), allowing files differing only by normalization form to bypass exclusions and be uploaded to Terraform Cloud/Enterprise, exposing sensitive local files. Fixed in v0.18.3; no workaround provided. Exp...

5.5CVSS5.2AI score0.00121EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 8:17 p.m.6 views

CVE-2026-16890

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow...

3.6CVSS0.00092EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 5:18 p.m.11 views

CVE-2026-20320

A vulnerability in the Open Client Interface OCI XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly parsed due to external entity resolution...

7.5CVSS0.00385EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/19 4:08 p.m.10 views

CVE-2026-16019

creationtimestamp| type| source ---|---|--- 2026-08-19 16:08:05+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mth4hvptjp2m 2026-08-19 16:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mth4lhxgtt25...

9.8CVSS4.8AI score0.00321EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 2:53 p.m.10 views

EUVD-2026-62511

Dell Command Update DCU, versions prior to 5.7.1, contain an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

5.5CVSS5.4AI score0.00102EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 1:55 p.m.5 views

CGA-F8FR-G9GW-GWRH

Bulletin has no description...

7.5CVSS4.8AI score0.00317EPSS
SaveExploits0
OSV
OSV
added 2026/08/19 1:48 p.m.3 views

MINI-MWJR-G3R3-5X4G

Bulletin has no description...

7.5CVSS5AI score0.00298EPSS
SaveExploits0
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73386

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

7.5CVSS0.00245EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 1:18 p.m.5 views

CVE-2026-73384

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...

7.5CVSS0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 12:38 p.m.31 views

CVE-2026-73386 WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

7.5CVSS0.00245EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 12:38 p.m.7 views

EUVD-2026-62387

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...

7.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 12:38 p.m.15 views

CVE-2026-73386

The WordPress plugin "Track Geolocation Of Users Using Contact Form 7" through version 3.0.2 exposes sensitive data to unauthenticated users over the network (CVSS 7.5 HIGH, C:H/I:N/A:N). No exploitation status or remediation details are provided in the documents. Monitor for plugin updates. Patc...

7.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 12:38 p.m.31 views

CVE-2026-73384 WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...

7.5CVSS0.00245EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 12:38 p.m.8 views

EUVD-2026-62385

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 = 1.0.4 versions...

7.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 12:38 p.m.23 views

CVE-2026-73384

Pay with Contact Form 7 is a WordPress plugin affected by an unauthenticated sensitive data exposure vulnerability in versions

7.5CVSS5.2AI score0.00245EPSS
SaveExploits0References1
PyPA
PyPA
added 2026/08/19 11:56 a.m.8 views

Glances: as_dict_secure() Value-Level Bypass Leaks Credentials in URL Values via /api/4/config

SummaryGlances provides asdictsecure explicitly designed for unauthenticated API access, with a docstring stating it returns "a sanitised copy of the configuration dict" where "Sensitive keys in remaining sections are replaced by ''". However, the implementation only checks KEY names against a...

5.3CVSS5.3AI score0.00237EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder