Lucene search
+L

142 matches found

RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.7 views

CVE-2025-54685

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force SureDash suredash allows Retrieve Embedded Sensitive Data.This issue affects SureDash: from n/a through = 1.1.0...

6.5CVSS5.9AI score0.00352EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 6:21 p.m.2 views

CVE-2025-55710 WordPress TaxoPress Plugin <= 3.37.2 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Steve Burge TaxoPress allows Retrieve Embedded Sensitive Data. This issue affects TaxoPress: from n/a through 3.37.2...

4.3CVSS7.1AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/12 6:37 a.m.19 views

CVE-2025-47444 WordPress FiboSearch plugin <= 1.32.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiboSearch: from n/a through = 1.32.1...

5.3CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/12 6:37 a.m.34 views

CVE-2025-47444

CVE-2025-47444 affects the WordPress FiboSearch plugin (ajax-search-for-woocommerce) with versions

5.3CVSS5.9AI score0.00238EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.8 views

PT-2025-32630

Name of the Vulnerable Software and Affected Versions: GiveWP versions prior to 4.6.1 Description: GiveWP contains a flaw related to the insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Recommendations: Update GiveWP to version 4.6.1 or later...

7.5CVSS6.1AI score0.00238EPSS
SaveExploits0References13
OSV
OSV
added 2025/06/09 4:15 p.m.9 views

CVE-2025-48261

Insertion of Sensitive Information Into Sent Data vulnerability in MultiVendorX MultiVendorX allows Retrieve Embedded Sensitive Data. This issue affects MultiVendorX: from n/a through 4.2.22...

7.5CVSS5.8AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/28 6:15 p.m.8 views

CVE-2025-48749

Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...

9.1CVSS5.8AI score0.00427EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:47 a.m.8 views

CVE-2023-1975

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...

7.6CVSS6.6AI score0.00586EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/01/24 12:00 a.m.10 views

WordPress plugin 12 Step Meeting List 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

5.3CVSS6.4AI score0.0096EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.9 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal REST Views prior to version 3.0.1, which stems from the inclusion of an insertion of sensitive information into sent data vulnerability...

7.5CVSS6.5AI score0.00491EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/07 11:15 a.m.45 views

CVE-2025-22303

Insertion of Sensitive Information Into Sent Data vulnerability in brandtoss WP Mailster allows Retrieve Embedded Sensitive Data.This issue affects WP Mailster: from n/a through 1.8.17.0...

7.5CVSS7.3AI score0.0044EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/06 12:00 a.m.24 views

WordPress plugin WP Mailster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS8.2AI score0.00585EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/06 12:00 a.m.11 views

PT-2024-35918

Name of the Vulnerable Software and Affected Versions WP Mailster versions 1.8.16.0 and earlier Description The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This can potentially expose confidential information. Recommendations...

7.5CVSS8.5AI score0.00585EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/09/26 5:42 p.m.26 views

CVE-2024-41931 goTenna Pro ATAK Plugin Insertion of Sensitive Information Into Sent Data

The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broadcast message. It is advised to share the encryption key via local QR for higher security operations...

5.3CVSS0.00141EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2024/08/16 12:00 a.m.16 views

VulnCheck KEV: CVE-2024-43283

Insertion of Sensitive Information Into Sent Data vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 23.1.2...

7.5CVSS5.8AI score0.01104EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/24 12:00 a.m.10 views

PT-2024-10129 · Drupal · Drupal Rest Views

Name of the Vulnerable Software and Affected Versions: Drupal REST Views versions 0.0.0 through 3.0.1 Description: The issue is related to the insertion of sensitive information into sent data, allowing forceful browsing. This can enable a remote attacker to gain unauthorized access to protected...

7.8CVSS7.2AI score0.00491EPSS
SaveExploits0References5
Snyk
Snyk
added 2024/02/20 9:30 a.m.5 views

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the Control Panel. An attacker can obtain sensitive user information by enumerating user screen names and accessing the page's title. Remediation Upgrade...

5.3CVSS6.6AI score0.00439EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2024/01/24 12:00 a.m.5 views

VulnCheck KEV: CVE-2024-23506

Insertion of Sensitive Information Into Sent Data vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Connect: from n/a through = 0.1.0.9...

6.5CVSS6.9AI score0.00504EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/11 10:15 a.m.20 views

CVE-2023-1975

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8...

7.6CVSS6.6AI score0.00586EPSS
SaveExploits1References2
CVE
CVE
added 2023/04/11 12:00 a.m.139 views

CVE-2023-1975

The CVE-2023-1975 entry refers to an information-disclosure flaw in the open-source project answerdev/answer prior to version 1.0.8, where EXIF geolocation data is not stripped from user-uploaded logos. Multiple connected sources (CNVD/CNNVD, GHSA, OSV, NVD, CVE listings) corroborate that an atta...

7.6CVSS6.5AI score0.00586EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder