143947 matches found
EUVD-2024-55695
Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...
WordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Social Ninja versions = 4.3.0...
WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Derrick Gilliland in WordPress Plugin PeproDev Ultimate Invoice versions = 2.2.6...
PT-2026-63911
Unauthenticated Sensitive Data Exposure in Create by Mediavine = 2.5.3 versions...
PT-2026-63612
Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable...
PT-2026-63582
Name of the Vulnerable Software and Affected Versions Bosch Configuration Manager version 7.72.0106 Description An information disclosure issue exists that allows an attacker to access sensitive information. Recommendations At the moment, there is no information about a newer version that contain...
PT-2026-64108
Summary The multiedit tool in src/praisonai/praisonai/tools/multiedit.py allows LLM-controlled arbitrary file read and write without any path validation, workspace boundary check, or protected path guard. This enables an attacker who can influence agent tool arguments via crafted prompts, user...
PT-2026-63954
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...
PT-2026-64120
Summary An unauthenticated attacker can read arbitrary files on the server by supplying an absolute filesystem path in the agent file field of the Jobs API. The field has no path validation, no allowlist, and no authentication is required to submit jobs. Details The agent file field in...
PT-2026-63955
In JetBrains GoLand before 2026.2 sensitive configuration values written to log files by default...
PT-2026-64198
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions 3.2.1a14 and earlier Description An exposure of sensitive system information to an unauthorized control sphere allows unauthenticated users to perform asset discovery. Recommendations Update Pronetiqs IntraVUE to a...
PT-2026-63811
Unauthenticated Sensitive Data Exposure in PeproDev Ultimate Invoice = 2.2.6 versions...
PT-2026-64195
Name of the Vulnerable Software and Affected Versions Pronetiqs IntraVUE versions prior to 3.2.1a14 Description An exposure of sensitive system information to an unauthorized control sphere exists, which could lead to the exposure of the underlying host or share filesystem. Recommendations Update...
PT-2026-63946
Contributor Sensitive Data Exposure in TinyMCE Templates = 4.8.1 versions...
PT-2026-63973
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.2 Description An authenticated attacker can exploit a path traversal issue in the /export/temp/ endpoint within the serveExport handler located in kernel/server/serve.go. The vulnerability exists because the...
PT-2026-63924
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...
CVE-2026-28698: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...
CVE-2026-47743: Improper Neutralization of Input During Web Page Generation
Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, three related defects on admin Livewire components allowed data tampering, sensitive data disclosure, and stored XSS. First, several Livewire components in the admin panel exposed Eloquent model identifiers as public properties without...
CVE-2026-65505: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...