134564 matches found
CVE-2026-61783 Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, an authenticated low-privilege user can read the cluster secret from the manager configuration because the logic that masks sensitive values is...
CVE-2026-81836 RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...
CVE-2026-81836
A vulnerability in RooCodeInc Roo-Code (up to version 3.51.1) affects the OAuth Callback component in the file src/integrations/claude-code/oauth.ts, where sensitive information is transmitted in cleartext. The attack is remote with no required authentication but carries high complexity . A proof...
CVE-2026-81836 RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission
A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of the component OAuth Callback. The manipulation results in cleartext transmission of sensitive information. The attack may be performed fro...
CVE-2026-59301
Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...
CVE-2026-59300
Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...
CVE-2026-59302
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
CVE-2026-59276
Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...
CVE-2026-37066
Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 allows and authenticated attacker with super administrator role to disclose sensitive information via two specially crafted http requests POST and GET to the...
GO-2026-6299 statping-ng allows attackers to escalate privileges to Administrator and access sensitive components in github.com/statping-ng/statping-ng
statping-ng allows attackers to escalate privileges to Administrator and access sensitive components in github.com/statping-ng/statping-ng...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...
CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
CVE-2026-59302 Potential for logging sensitive data in Spring Cloud Stream
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
EUVD-2026-67188
Potential for logging sensitive data in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
CVE-2026-59302
A flaw in Spring Cloud Stream versions 4.2.0 - 4.2.6 , 4.3.0 - 4.3.3 , and 5.0.0 - 5.0.2 allows for the unintended logging of sensitive data . This vulnerability could lead to a low-impact information disclosure where confidential information is exposed within application logs under certain condi...
CVE-2026-59301 Potential for logging sensitive data in Spring Cloud Function Azure
Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...
CVE-2026-59300 Potential for logging sensitive data in Spring Cloud Function AWS
Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...
EUVD-2026-67186
Potential for logging sensitive data in Spring Cloud Function AWS. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...
CVE-2026-59301
Spring Cloud Function Azure (org.springframework.cloud:spring-cloud-function-adapter-azure) versions 5.0.0–5.0.3, 4.3.0–4.3.4, and 4.2.0–4.2.7 are vulnerable to insertion of sensitive information into log files via the logging process. Under certain conditions, an attacker can access sensitive da...