490250 matches found
CVE-2026-75847 Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail
Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...
PT-2026-83505
Cleartext Storage of Sensitive Information vulnerability in ash-project ash paper trail allows an attacker with read access to the generated version resource to recover sensitive values nested inside embedded resources, unions, or lists. sensitive attributes :redact and :ignore only act on the...
PT-2026-83503
Cleartext Storage of Sensitive Information vulnerability in ash-project ash paper trail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated versio...
CVE-2026-75847: Cleartext Storage of Sensitive Information
Cleartext Storage of Sensitive Information vulnerability in ash-project ashpapertrail allows an attacker with read access to the generated version resource to recover the plaintext of sensitive? attributes. AshPaperTrail stores the values of tracked sensitive? attributes in the generated version...
Security update for pyenv (moderate)
openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2026:0311-1 Rating: moderate References: 1275661 Cross-References: CVE-2026-68939 CVSS scores: CVE-2026-68939 SUSE: 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Backports SLE-15-SP7 An...
Security update for gh (important)
openSUSE Security Update: Security update for gh Announcement ID: openSUSE-SU-2026:0309-1 Rating: important References: 1266618 Cross-References: CVE-2026-39821 CVE-2026-64652 CVE-2026-64653 CVE-2026-64654 CVE-2026-64655 CVSS scores: CVE-2026-39821 SUSE: 9.1...
CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...
CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...
MINI-FH3W-G93W-4V7F
Bulletin has no description...
4591-libs (>=0.0.1, <=0.2.0), @10abdullahbutt/nestjs-boilerplate (0.0.1) +1572 more potentially affected by CVE-2026-82333 via multer (>=2.0.0, <=2.2.0)
multer NPM version =2.0.0, =0.0.1, =0.0.1-alpha.1, =0.0.1-alpha.9, =0.0.0-alpha.119, =1.2.1-dev.3, =0.0.1, =1.0.0, =0.1.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.0.2, =0.0.10, =0.6.2 and more Source cves: CVE-2026-82333 Source advisory: SNYK:JS-MULTER-19432136...
Tor: Multiple Vulnerabilities
Background Tor is an implementation of second generation Onion Routing, a connection-oriented anonymizing communication service. Description Multiple vulnerabilities have been discovered in Tor. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CV...
EUVD-2026-42985
Snipe-IT has an Improper Privilege Management issue...
Malicious code in grafeno-actions (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a52df88a9094028961676cb72f9e43f88fcef959cc4e1db63687785058c2d7d The OpenSSF Package Analysis project identified 'grafeno-actions' @ 999.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2026-17203
IBM Administration Runtime Expert for i 1R1M0 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement...
EUVD-2026-42286
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets...
CVE-2026-3686
IBM Cloud Pak for Data System versions 11.3.0.2 through Interim Fix 001 are vulnerable to a denial of service caused by improper limitation of resources . The CVSS v3.1 base score is 6.2 (MEDIUM) with a local attack vector, no privileges required, and high availability impact but no confidentiali...
CVE-2026-3686 Vulnerabilities exists in IBM Cloud Pak for Data System
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources...
EUVD-2026-42297
Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...
@alancode95/core-prisma (1.0.0), @aliceo2/infologger (>=1.15.0, <=1.15.1) +39 more potentially affected by CVE-2026-55215 via mariadb (>=3.4.0, <=3.4.5)
mariadb NPM version =3.4.0, =1.15.0, =1.0.0, =0.3.3, =0.4.0, =0.5.0-beta.7, =2.105.0, =1.0.0, =6.3.14-dev.35, =0.2.1, =6.11.0-dev.20, =1.2.1, =2.1.0, =0.61.0, =0.93.0, =0.112.0 and more Source cves: CVE-2026-55215 Source advisory: OSV:GHSA-CQHC-2H57-WPXF...