ManageEngine Endpoint Central < 11.4.2528.34 / 11.5.x < 11.5.2600.13 Cleartext Transmission of Sensitive Information

The version of ManageEngine Endpoint Central installed on the remote host is prior to 11.4.2528.34 or 11.5.x prior to 11.5.2600.13. It is, therefore, affected by a cleartext transmission of sensitive information vulnerability. Note that Nessus has not tested for this issue but has instead relied...

Cisco Secure Firewall Management Center Software Static Credentials (cisco-sa-fmc-static-cred-BET3Cjh)

A vulnerability in the web interface of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to log in to an affected device using a static, low-privileged account and access sensitive data within the impacted system. This vulnerability is due to th...

CVE-2026-28144: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...

CVE-2026-56569: Exposure of Sensitive System Information to an Unauthorized Control Sphere

HCL iControl was affected by Sensitive Data Exposure vulnerabilities. It involves the public exposure of internal configuration files due to improper web server or application hardening...

PT-2026-66755

Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data. This issue affects WP Maps: from n/a through 4.9.6...

Adobe Campaign Classic SQL Injection Vulnerability

Adobe Campaign Classic is a marketing activity management platform developed by the American company Adobe. Adobe Campaign Classic has a SQL injection vulnerability, which stems from improper handling of special elements in SQL commands. Attackers can exploit this vulnerability to gain access to...

IBM App Connect Enterprise information leakage vulnerability (CNVD-2026-31544)

IBM App Connect Enterprise is an enterprise-level application connection platform used for system integration. It supports connections and conversions between applications, data, and APIs. There is an information leakage vulnerability in IBM App Connect Enterprise. This vulnerability stems from t...

Vite server.fs.deny Disclosure

The vulnerability of the server.fs.deny mechanism in the local development server of the Vite application is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2026-34490: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53...

PT-2026-66766

Name of the Vulnerable Software and Affected Versions HCL iControl affected versions not specified Description Sensitive data exposure occurs due to improper web server or application hardening, which allows the public exposure of internal configuration files. Recommendations At the moment, there...

CVE-2026-63559

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...

WordPress Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin <= 6.2.8 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated Sensitive Information Exposure vulnerability discovered by ChinhNguyen in WordPress Plugin FluentForm versions = 6.2.8...

CVE-2026-10569

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

Directory Traversal

Overview banks is an A prompt programming language Affected versions of this package are vulnerable to Directory Traversal via the Path parameter. An attacker can access sensitive files by supplying crafted path traversal sequences in user-controlled template variables, resulting in unauthorized...

CVE-2026-67528 OpenProject: Improper Access Control through /api/v3/custom_options/:id via Path "id" leads to Sensitive Data Exposure

OpenProject is open-source, web-based project management software. Prior to 17.6.0, GET /api/v3/customoptions/:id resolved CustomOption records by global numeric id and allowed UserCustomField and GroupCustomField options without checking visiblecurrentuser, so authenticated non-admin users could...

CVE-2026-67528

OpenProject before 17.6.0 exposes sensitive admin_only custom option labels via GET /api/v3/custom_options/:id due to missing visible(current_user) checks when resolving by global numeric id. Authenticated non-admin users can enumerate option IDs and read restricted labels. The issue is fixed in ...

CVE-2026-11904

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to obtain sensitive information when a...

EUVD-2026-51275

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

CVE-2026-10569

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...

CVE-2026-10569 IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Exposure of Sensitive Information Vulnerability

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnerability in plugin output logs. This exposure could allow an...