Lucene search
K

28030 matches found

NVD
NVD
added 2026/05/07 10:16 p.m.21 views

CVE-2026-42826

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network...

10CVSS0.0084EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/05/07 2:0 p.m.11 views

Azure DevOps Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network...

10CVSS5.8AI score0.0084EPSS
Exploits0
EUVD
EUVD
added 2026/05/07 9:31 a.m.8 views

EUVD-2026-28332

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8...

5.3CVSS5.8AI score0.00336EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/07 9:31 a.m.11 views

EUVD-2024-55567

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS5.8AI score0.0034EPSS
Exploits0References2
NVD
NVD
added 2026/05/07 9:16 a.m.14 views

CVE-2026-25468

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8...

5.3CVSS0.00336EPSS
Exploits0References1
NVD
NVD
added 2026/05/07 9:16 a.m.20 views

CVE-2024-43384

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS0.0034EPSS
Exploits0References1
CVE
CVE
added 2026/05/07 8:37 a.m.15 views

CVE-2024-43384

The CVE-2024-43384 entry concerns Phoenix Contact MGUARD products. Affected component: the devices’ handling/storage/transfer of sensitive data. Root cause: improper removal of sensitive information before storage or transfer, enabling exposure of the root password. Impact: a low-privileged remot...

8CVSS5.8AI score0.0034EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/07 8:37 a.m.7 views

CVE-2024-43384

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS5.8AI score0.0034EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 8:37 a.m.7 views

CVE-2024-43384 Phoenix Contact: Improper removal of sensitive information in MGUARD products

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS5.8AI score0.0034EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/07 8:37 a.m.48 views

CVE-2024-43384 Phoenix Contact: Improper removal of sensitive information in MGUARD products

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer...

8CVSS0.0034EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/07 7:37 a.m.7 views

CVE-2026-25468 WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8...

5.3CVSS5.8AI score0.00336EPSS
Exploits0References1
CVE
CVE
added 2026/05/07 7:37 a.m.22 views

CVE-2026-25468

CVE-2026-25468 concerns the WordPress plugin Happy Addons for Elementor (weDevs) versions 3.20.8 and earlier. The description identifies a Sensitive Data Exposure vulnerability where an Unauthorized Control Sphere can Retrieve Embedded Sensitive Data, affecting Happy Addons for Elementor from n/a...

5.3CVSS5.8AI score0.00336EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/07 7:37 a.m.36 views

CVE-2026-25468 WordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data. This issue affects Happy Addons for Elementor: from n/a through 3.20.8...

5.3CVSS0.00336EPSS
Exploits0References1
OSV
OSV
added 2026/05/07 6:31 a.m.3 views

GHSA-J6HH-H3CF-C2HF Spring Cloud Config Server Logged Sensitive Information

When trace logging is enabled in Spring Cloud Config Server, sensitive information is placed in plain text in the logs. - Spring Cloud Config 3.0.x: affected from 3.0.0 through 3.0.7 inclusive; no open-source upgrade available. - Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13...

4.4CVSS5.2AI score0.00168EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2026/05/07 6:31 a.m.13 views

Spring Cloud Config Server Logged Sensitive Information

When trace logging is enabled in Spring Cloud Config Server, sensitive information is placed in plain text in the logs. - Spring Cloud Config 3.0.x: affected from 3.0.0 through 3.0.7 inclusive; no open-source upgrade available. - Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13...

4.4CVSS5.2AI score0.00168EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2026/05/07 4:16 a.m.8 views

CVE-2026-41004

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterprise Support Only. Spring Cloud Config 4.1.x: affected from 4.1.0 throu...

4.4CVSS0.00168EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/07 3:51 a.m.5 views

CVE-2026-41004

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterprise Support Only. Spring Cloud Config 4.1.x: affected from 4.1.0 throu...

4.4CVSS5.8AI score0.00168EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/07 3:51 a.m.5 views

CVE-2026-41004

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterprise Support Only. Spring Cloud Config 4.1.x: affected from 4.1.0 throu...

4.4CVSS5.8AI score0.00168EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/05/07 3:51 a.m.7 views

EUVD-2026-28250

When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs. Spring Cloud Config 3.1.x: affected from 3.1.0 through 3.1.13 inclusive; upgrade to 3.1.14 or greater Enterprise Support Only. Spring Cloud Config 4.1.x: affected from 4.1.0 throu...

4.4CVSS5.8AI score0.00168EPSS
Exploits0References1
CVE
CVE
added 2026/05/07 3:51 a.m.21 views

CVE-2026-41004

The CVE-2026-41004 affects Spring Cloud Config Server when trace logging is enabled, exposing sensitive information in plain text in logs. All affected branches and versions include: Spring Cloud Config 3.1.x (3.1.0–3.1.13) with upgrade to 3.1.14+; 4.1.x (4.1.0–4.1.9) upgrade to 4.1.10+; 4.2.x (4...

4.4CVSS5.8AI score0.00168EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder