EUVD-2026-18554

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials...

CVE-2026-35467

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials...

PagerDuty Runbook 安全漏洞

PagerDuty Runbook is an automation platform from PagerDuty USA. A security vulnerability exists in PagerDuty Runbook version 2025-06-12 and earlier, which stems from a configuration page that directly exposes stored keys, potentially leading to the disclosure of sensitive information...

MAL-2024-11082 Malicious code in rtn-centered-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c2f20177c95333172f2abb0596c37a5b6c2a294dcd40dda5a0608b6f83778b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10707 Malicious code in p-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6020c72434d3e7647714902b693a6b7724105d815480ccd6ea906112b33e23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-623 Malicious code in wlwz-2312-5003 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7470ec0b5a5579469d69934e2e983af7eb6ec2cc212e353c1d5ae8fff2eb641 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3927

The affected products store both public and private key that are used to sign and protect Custom Parameter Set CPS file from modification. An attacker that manages to exploit this vulnerability will be able to change the CPS file, sign it so that it is trusted as the legitimate CPS file. This iss...

CVE-2022-3907

The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API requests due to the usage of comparison operators to verify API keys against the ones stored in the site options...

MAL-2022-5713 Malicious code in rec3t-dev-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d448e9d4d5fbd9def37731a1409acb449e54c306bddb581430918e5ea7f1db44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5109 Malicious code in opstimlst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1931c57874f4a33e47102b939b2235f5c94f75dbc2032473660d4d102f21e45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3799 Malicious code in imagemu8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553206ec9b55f50c3c247964d0ab30622ff141ef7cfe055c7928cacad00b38d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6347 Malicious code in suggests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb374151849da575040b6992af495cc8d7abf55f4e5ac68fcdad3b178f3e4cb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7125 Malicious code in wf_apn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01c53fc0839183701573003861341005906ad7c0dcf0f3005a411f64dfa875f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5116 Malicious code in orangeonion.buildtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01d5d87d4e17da3a852029e3970ff209b44f9254cf8481c4a527feb52b18524a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2707 Malicious code in elysium-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac9886cb28178ea7b997ed59ad346289412165acec0b1a72291e38d656e36236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-10356

It was discovered that the Security component of OpenJDK generated weak password-based encryption keys used to protect private keys stored in key stores. This made it easier to perform password guessing attacks to decrypt stored keys if an attacker could gain access to a key store...

etcd Information Disclosure Vulnerability - Active Check

etcd is prone to an information disclosure vulnerability if no authentication is enabled. An attacker may read all stored key values which might contain sensitive information like passwords. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to compromise the security of the protected information.

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to errors in managing registration data. Exploiting this vulnerability could allow an intruder, operating locally, to compromise the security of protected information due to the storage of closed keys...