Lucene search
+L

129001 matches found

NVD
NVD
added 2025/12/23 12:15 p.m.20 views

CVE-2025-68551

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/23 11:46 a.m.5 views

CVE-2025-68551 WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through 3.2.24...

6.5CVSS6.5AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/23 11:46 a.m.17 views

CVE-2025-68551

Technical details about CVE-2025-68551 (VPSUForm v-form data exposure) are not present in the provided documents. No product/version/root cause/impact/fix information is available here; monitor for updates and vendor advisories.

6.5CVSS5.9AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/23 11:46 a.m.38 views

CVE-2025-68551 WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vikas Ratudi VPSUForm v-form allows Retrieve Embedded Sensitive Data.This issue affects VPSUForm: from n/a through = 3.2.24...

6.5CVSS0.00254EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/23 11:45 a.m.11 views

WordPress VPSUForm plugin <= 3.2.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Jitlada in WordPress Plugin VPSUForm versions = 3.2.24...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits0Affected Software1
Veracode
Veracode
added 2025/12/23 11:38 a.m.16 views

Sensitive Information Disclosure

Jenkins is vulnerable to Sensitive Information Disclosure. The vulnerability is due to build authorization tokens not being masked in the job configuration form, which allows an attacker who can view the configuration page to observe and capture these tokens...

4.3CVSS6.9AI score0.00156EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/23 6:29 a.m.15 views

CVE-2025-11545

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly access the HTTP server and execute arbitrary actions...

9.5CVSS7.3AI score0.00293EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.20 views

CVE-2025-63662

Insecure permissions in the /api/v1/agents API of GT Edge AI Platform before v2.0.10-dev allows unauthorized attackers to access sensitive information...

7.5CVSS6.7AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/23 12:00 a.m.11 views

WordPress plugin VPSUForm 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.2AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/23 12:00 a.m.10 views

PT-2025-52738

Name of the Vulnerable Software and Affected Versions Vikas Ratudi VPSUForm versions through 3.2.24 Description A flaw exists in Vikas Ratudi VPSUForm that allows the retrieval of embedded sensitive data, potentially exposing sensitive system information to unauthorized access. The issue affects...

6.5CVSS6.4AI score0.00254EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/22 9:35 p.m.49 views

CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

8.8CVSS0.00527EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.5 views

CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

8.8CVSS6.5AI score0.00527EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/12/22 9:31 p.m.19 views

CVE-2025-62955

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HappyDevs TempTool Show Current Template Info current-template-name allows Retrieve Embedded Sensitive Data.This issue affects TempTool Show Current Template Info: from n/a through = 1.3.1...

4.3CVSS5.9AI score0.00205EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/22 6:41 p.m.17 views

WordPress WooCommerce plugin <= 10.4.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Stöckli in WordPress Plugin WooCommerce versions = 10.4.2...

6.5CVSS6.9AI score0.00323EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/12/22 1:19 p.m.9 views

WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Tablesome versions = 1.1.35.1...

7.5CVSS7AI score0.00208EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2025/12/22 10:07 a.m.38 views

CVE-2025-61738

CVE-2025-61738 affects Johnson Controls PowerG and IQPanel family. The Root cause is cleartext transmission of sensitive information, allowing an attacker under certain circumstances to capture the network key and read or write encrypted PowerG packets. Documented impact is limited to confidentia...

2.3CVSS6.6AI score0.00176EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/22 8:15 a.m.14 views

CVE-2025-8304

An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server...

6.5CVSS0.00116EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/22 5:18 a.m.10 views

EUVD-2025-204692

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly access the HTTP server and execute arbitrary actions...

9.5CVSS6.8AI score0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/22 5:18 a.m.44 views

CVE-2025-11545

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly access the HTTP server and execute arbitrary actions...

9.5CVSS0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/22 5:18 a.m.5 views

CVE-2025-11545

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly access the HTTP server and execute arbitrary actions...

9.5CVSS6.9AI score0.00293EPSS
SaveExploits0References1
Rows per page
Query Builder