CVE-2025-50109

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

CVE-2025-50109: Cleartext Storage of Sensitive Information in Memory

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

CVE-2025-50109 Emerson ValveLink Products Cleartext Storage of Sensitive Information in Memory

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere...

PT-2025-29182 · Emerson · Valvelink

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink affected versions not specified Description: Emerson ValveLink products store sensitive information in cleartext within a resource that may be accessible to another control sphere. Recommendations: At the moment, there is no...

CVE-2025-41672 WAGO: Vulnerability in WAGO Device Sphere

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices...

CVE-2025-41672 WAGO: Vulnerability in WAGO Device Sphere

A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices...

CVE-2025-41672

CVE-2025-41672 affects WAGO Device Sphere. A remote unauthenticated attacker can use default certificates to generate JWT tokens, gaining full access to the tool and all connected devices. The connected documents confirm the vulnerability existence and impact but do not provide concrete details o...

PT-2025-28136

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices. Recommendations: At the moment, there is no...

WAGO Device Sphere 安全漏洞

WAGO Device Sphere is a device management system from WAGO Germany. A security vulnerability exists in WAGO Device Sphere, which can be exploited by a remote, unauthenticated attacker to generate a JWT token using default certificates to gain full access...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the duplicated context process. An attacker can access sensitive data from another transaction by triggering the duplication of an already duplicated context. Note: Duplicating a duplicated conte...

CVE-2025-52719

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve Embedded Sensitive Data.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the /admin/serverinfo endpoint...

CVE-2025-52719

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve Embedded Sensitive Data.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

CVE-2025-52719

CVE-2025-52719 concerns WordPress ProfileGrid plugin, affected versions through 5.9.5.2. The issue is described as exposure of sensitive system information to an unauthorized control sphere, enabling retrieval of embedded sensitive data (Full Path Disclosure). Root cause and impact are described ...

CVE-2025-52719: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve Embedded Sensitive Data.This issue affects ProfileGrid : from n/a through = 5.9.5.2...

CVE-2025-36852: Inclusion of Functionality from Untrusted Control Sphere

A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache such as those using Amazon S3, Google Cloud Storage, or similar object storage that allows any contributor with pull request privileges to inject compromised artifacts...

CVE-2025-31045

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget elfsight-contact-form allows Retrieve Embedded Sensitive Data.This issue affects elfsight Contact Form widget: from n/a through = 2.3.1...

CVE-2025-31045: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in elfsight elfsight Contact Form widget elfsight-contact-form allows Retrieve Embedded Sensitive Data.This issue affects elfsight Contact Form widget: from n/a through = 2.3.1...

CVE-2025-49419

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in esigngenie Foxit eSign for WordPress esign-genie-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Foxit eSign for WordPress: from n/a through = 2.0.3...

CVE-2025-2236 Exposure of Sensitive System Information vulnerability during configuration affecting OpenText Advanced Authentication.

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in OpenText Advanced Authentication allows Information Elicitation. The vulnerability could reveal sensitive information while managing and configuring of the external services. This issue affects Advanced...