Lucene search
+L

11 matches found

NVD
NVD
•added 2026/08/30 1:20 a.m.•22 views

CVE-2026-75847

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

5.9CVSS0.00121EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/30 12:18 a.m.•18 views

CVE-2026-77970 Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitiveattributes :redact and :ignore only act on the track...

5.9CVSS5.9AI score0.00121EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/08/30 12:18 a.m.•21 views

EUVD-2026-68142

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

5.9CVSS5.9AI score0.00121EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/30 12:18 a.m.•15 views

CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

5.9CVSS5.9AI score0.00121EPSS
SaveExploits0References4
Mend
Mend
•added 2026/08/30 12:18 a.m.•3 views

CVE-2026-75847

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

6.2CVSS5.9AI score0.00121EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•30 views

PT-2026-83503

Cleartext Storage of Sensitive Information vulnerability in ash-project ash paper trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated versio...

5.9CVSS5.9AI score0.00121EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•5 views

CVE-2026-75847: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...

5.9CVSS5.9AI score0.00121EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-29511

Malware in sbrugna...

7.5CVSS7.5AI score0.01475EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2005/09/16 4:00 a.m.•34 views

CVE-2005-2947

Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource...

7.8AI score0.02451EPSS
SaveExploits1References4
CVE
CVE
•added 2005/09/16 4:00 a.m.•54 views

CVE-2005-2947

CVE-2005-2947 describes a buffer overflow in KillProcess version 2.20 and earlier, triggered by an executable file containing a long FileDescription in the version resource. The vulnerability can allow user‑assisted attackers to execute arbitrary code. The provided connected documents do not spec...

5.1CVSS8.1AI score0.02451EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/09/16 12:00 a.m.•5 views

CVE-2005-2947: Undefined Security Weakness

Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDescription in the version resource...

5.1CVSS6.5AI score0.02451EPSS
SaveExploits1References1
Rows per page
Query Builder