143197 matches found
CVE-2026-102098 Kiteworks Core SQL Injection
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CVE-2026-102098 Kiteworks Core SQL Injection
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CVE-2026-102098
Kiteworks Core versions prior to 9.5.0 are vulnerable to a stored SQL injection within an administrative reporting feature. This vulnerability allows an authenticated administrator with access to the affected reporting function to read sensitive data from the underlying database and potentially a...
EUVD-2026-90370
Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...
CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22
Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...
CVE-2026-47594
A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger a use-after-free condition—where memory is accessed after it has been released—by submitting a specific sequence of driver commands. Successful exploitation could allow an attacker to execute arbitrary code,...
CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure
yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...
EUVD-2026-88468
@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages...
CVE-2026-97302
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97261
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...
CVE-2026-97241
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-97240
Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...
CVE-2026-96834
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
CVE-2026-97302 WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97302 WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
EUVD-2026-89936
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-97302
The WordPress MPG plugin (versions
CVE-2026-97261 WordPress Notivo plugin <= 1.4.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Notivo = 1.4.2 versions...