Lucene search
+L

143755 matches found

Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•18 views

PT-2026-71812

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...

5.3CVSS5.2AI score0.00402EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•22 views

PT-2026-71555

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•8 views

CVE-2026-66443: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...

7.5CVSS5.7AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•4 views

CVE-2026-66463: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

7.5CVSS5.7AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•6 views

CVE-2026-0290: Insufficiently Protected Credentials

An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...

5.5CVSS5.8AI score0.00127EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•9 views

CVE-2026-66462: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

7.5CVSS5.7AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•8 views

CVE-2026-66432: Exposure of Sensitive System Information Due to Uncleared Debug Information

Subscriber Sensitive Data Exposure in WPJAM Basic = 7.0.2.1 versions...

7.5CVSS5.7AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•11 views

CVE-2026-73604: Exposure of Sensitive Information to an Unauthorized Actor

Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext. Authenticated users with credentials:view permission can retrieve sensitive data including database connection URLs with embedded...

7.1CVSS5.8AI score0.00412EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•25 views

PT-2026-71828

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management...

8.1CVSS5.2AI score0.00426EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•52 views

Palo Alto Networks PAN-OS 10.2.x < 10.2.8 / 11.1.x < 11.1.16-h1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.8 or 11.1.x prior to 11.1.16-h1. It is, therefore, affected by a vulnerability. An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS software enables an...

7.5CVSS7.2AI score0.00328EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•19 views

Alibaba Cloud Linux 3 : 0255: resource-agents (ALINUX3-SA-2026:0255)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0255 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-44431: urllib3 is an HTTP client library f...

8.2CVSS6.1AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•16 views

PT-2026-71568

Unauthenticated Sensitive Data Exposure in WooCommerce Appointments = 5.3.8 versions...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•9 views

CVE-2026-72670: Exposure of Sensitive Information to an Unauthorized Actor

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...

7.7CVSS5.8AI score0.00484EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•17 views

PT-2026-71413

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

9.1CVSS5.2AI score0.00427EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•6 views

CVE-2026-28174: Insertion of Sensitive Information Into Sent Data

Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...

6.5CVSS5.7AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•19 views

PT-2026-71417

CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...

9.3CVSS5.2AI score0.00335EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•11 views

CVE-2026-50105: Exposure of Sensitive Information to an Unauthorized Actor

RSS/Atom feed handlers bypass API-token scope & public-only confinement incomplete fix of 37698...

4.3CVSS6.5AI score0.00359EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•9 views

CVE-2026-59507: Use of Hard-coded Credentials

: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP developed by Soft Solutions. This issue affects Portal Generator addon to Priority ERP developed by Soft Solution...

9.3CVSS5.7AI score0.00335EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•10 views

CVE-2026-65933: Buffer Over-read

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

5.3CVSS5.7AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•17 views

PT-2026-71569

Unauthenticated Sensitive Data Exposure in iCARRY = 2.9 versions...

7.5CVSS5.2AI score0.00416EPSS
SaveExploits0References2
Rows per page
Query Builder