Lucene search
+L

22286 matches found

EUVD
EUVD
•added 2026/01/07 8:58 p.m.•19 views

EUVD-2026-1397

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow in CIccXmlArrayType::ParseText. This vulnerability affects users of the...

8.8CVSS5.9AI score0.00368EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/01/07 8:58 p.m.•15 views

CVE-2026-21682 iccDEV has heap-buffer-overflow in CIccXmlArrayType::ParseText()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a heap-buffer-overflow in CIccXmlArrayType::ParseText. This vulnerability affects users of the...

8.8CVSS5.8AI score0.00368EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
•added 2026/01/07 6:30 p.m.•3 views

com.opensearchserver:oss-text-extractor (1.0.0), io.undertow:undertow-servlet (1.0.17.final) +1 more potentially affected by CVE-2025-12543 via io.undertow:undertow-core (1.0.17.final)

io.undertow:undertow-core MAVEN version 1.0.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.opensearchserver:oss-text-extractor 1.0.0 - io.undertow:undertow-servlet 1.0.17.final -...

9.6CVSS7.6AI score0.01333EPSS
SaveExploits0
NVD
NVD
•added 2026/01/07 5:16 p.m.•25 views

CVE-2026-22544

An attacker with a network connection could detect credentials in clear text...

8.7CVSS0.00236EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/07 5:16 p.m.•30 views

CVE-2026-22537

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

6.8CVSS0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 5:11 p.m.•39 views

CVE-2026-21679 iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...

8.8CVSS0.00383EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2026/01/07 5:11 p.m.•24 views

CVE-2026-21679 iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV is vulnerable to heap-buffer-overflow in CIccLocalizedUnicode::GetText. This issue has been patched in version 2.3.1.2...

8.8CVSS6.6AI score
SaveExploits0References6
CVE
CVE
•added 2026/01/07 5:05 p.m.•34 views

CVE-2026-22537

CVE-2026-22537 concerns Efacec QC electric vehicle charging posts (60/90/120). The core issue is insufficient system hardening that could let a user with management/maintenance access read files containing plaintext credentials or other sensitive information. Reported by Red Hat, NVD, CNNVD, CIRC...

6.8CVSS5.9AI score0.00124EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/07 5:05 p.m.•11 views

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

6.8CVSS5.9AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 5:05 p.m.•47 views

CVE-2026-22537 INFORMATION DISCLOSURE WITHIN THE OPERATING SYSTEM

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files containing clear-text credentials or valuable information for an attacker...

6.8CVSS0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 4:23 p.m.•49 views

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

8.7CVSS0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/07 4:23 p.m.•15 views

CVE-2026-22544 EXCHANGE OF CREDENTIALS IN CLEAR TEXT

An attacker with a network connection could detect credentials in clear text...

8.7CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/07 4:23 p.m.•49 views

CVE-2026-22544

CVE-2026-22544 is described across multiple feeds as a vulnerability where credentials can be detected in clear text over a network. Connected sources confirm the impact across various contexts, including a specific example in Efacec QC charging posts (CNNVD) and generic network exposure (NVD, Re...

8.7CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/07 12:34 p.m.•48 views

CVE-2025-46256

CVE-2025-46256 relates to WordPress Advanced Database Cleaner PRO before or up to 3.2.10, with a Limited .txt Path Traversal vulnerability. Affected software is the Advanced Database Cleaner PRO plugin (SigmaPlugin implementation). Impact described as path traversal; CVSS v3.1 base score 6.4 (NET...

6.4CVSS5.8AI score0.00284EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 12:34 p.m.•47 views

CVE-2025-46256 WordPress Advanced Database Cleaner PRO Plugin <= 3.2.10 - Limited .txt Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue affects Advanced Database Cleaner PRO: from n/a through 3.2.10...

6.4CVSS0.00284EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:40 a.m.•24 views

CVE-1999-0765

SGI IRIX midikeys program allows local users to modify arbitrary files via a text editor...

10CVSS6AI score0.0522EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:32 a.m.•24 views

CVE-2019-16253

The Text-to-speech Engine aka SamsungTTS application before 3.0.02.7 and 3.0.00.101 for Android allows a local attacker to escalate privileges, e.g., to system privileges. The Samsung case ID is 101755...

7.8CVSS7.3AI score0.01192EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•21 views

CVE-2019-16568

Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previously configured service credentials in plain text as part of the global configuration, as well as individual jobs' configurations...

5.3CVSS5.5AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•35 views

CVE-2019-16210

Brocade SANnav versions before v2.0, logs plain text database connection password while triggering support save...

5.5CVSS5.8AI score0.00205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:17 a.m.•32 views

CVE-2025-1709

Several credentials for the local PostgreSQL database are stored in plain text partially base64 encoded...

6.5CVSS6.6AI score0.00424EPSS
SaveExploits0References1
Rows per page
Query Builder