CVE-2026-13611: Exposure of Sensitive Information to an Unauthorized Actor

The KiviCare WordPress plugin before 4.5.5 does not perform authorization checks on some of its REST endpoints, allowing unauthenticated attackers to disclose the patient roster and, when a payment gateway is configured, the payment gateway secret key...

CVE-2026-84134: Exposure of Sensitive Information to an Unauthorized Actor

Other issue in the Profile Backup component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

PT-2026-84544

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Missing authorization in the FileSystem component allows a remote attacker to obtain sensitive information. This occurs when an attacker has already compromised the renderer process and...

PT-2026-84473

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A privilege escalation issue exists in the API endpoint of AOS-CX. An authenticated user with low-privilege operator permissions can access sensitive information from the system, provided a...

PT-2026-84088

Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash discloses the stored value of a confirmed field to an actor who fails its confirmation check. Ash.Resource.Validation.Confirm's atomic implementation atomic/2 in lib/ash/resource/validation/confirm.ex...

PT-2026-84295

Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software allows Retrieve Embedded Sensitive Data. This issue affects Talassoft Industrial Management Software: from V.4 before V.16...

CVE-2026-73775: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73727: Incorrect Authorization

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to...

CVE-2026-73732: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low privilege operator user with local access to obtain sensitive information. Successful exploitation could allow an attacker to retrieve sensitive data which could be used to gain...

CVE-2026-59903

A flaw was found in Netty, an asynchronous, event-driven network application framework. The CorsHandler component incorrectly replaces application Vary headers, such as Authorization or Cookie, with Origin. This allows a caching proxy or Content Delivery Network CDN to reuse authenticated respons...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the Spring Boot Actuator endpoints exposed on the tracing API port in zipkin-server/src/main/resources/zipkin-server-shared.yml. An attacker can read sensitive runtime data by sending...

CVE-2026-81280

Print Barcode Labels for your WooCommerce products/orders is a WordPress plugin vulnerable to Sensitive Data Exposure in versions 4.0.0 and below . The vulnerability requires Subscriber-level privileges (low) and can be exploited over the network with low complexity and no user interaction, resul...

EUVD-2026-68776

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-81280 WordPress Print Barcode Labels for your WooCommerce products/orders plugin <= 4.0.0 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders = 4.0.0 versions...

CVE-2026-75133

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed kbdcronprocess parameter without authentication. Attackers can predict the...

CVE-2026-21827

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

EUVD-2026-68615

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827 HCL Connections is vulnerable to an information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper handling of request data they are not entitled to, caused by improper handling of request data...

CVE-2026-21827

HCL Connections is affected by an information disclosure vulnerability caused by improper handling of request data , potentially allowing a user to obtain sensitive information they are not entitled to access. The CVSS 3.1 score is 3.1 (LOW) , reflecting a network attack vector with high complexi...