CWE-200

The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and e

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Security). Supported

The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification se

There is a possible information disclosure due to a missing permission check. This could lead to local information discl

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance

In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In CoC

Information disclosure due to uninitialized variable.

Information disclosure possible while audio playback.

Contao is an open source content management system. Starting in version 4.9.0 and prior to versions 4.13.40 and 5.3.4, w

A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could b

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering

A vulnerability affects Brocade SANnav before v2.3.1 and v2.3.0a. It allows a Brocade SANnav service to send ping comman

Section Camera V2.5.5.3116-S50-SMA-B20160811 and earlier versions allow the accounts and passwords of administrators and

Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrw_log" functionality. This

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mai

A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v

In lunary-ai/lunary version 1.2.4, an account takeover vulnerability exists due to the exposure of password recovery tok

Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacke

Vulnerability in the Oracle Process Manufacturing Financials product of Oracle E-Business Suite (component: Allocation R

An issue was discovered in the Docusign API package 8.142.14 for Salesforce. The Apttus_DocuApi__DocusignAuthentication_

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access adminis

Zohocorp ManageEngine Analytics Plus versions below 6100 are vulnerable to authenticated sensitive data exposure which a

Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

Various software builds for the following TCL 30Z and TCL A3X devices leak the ICCID to a system property that can be ac

A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This atta

The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 an

CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations th

A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerabi

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix refcnt handling in __inet_hash_connect().

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdi

Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. Vela pipelines ca

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF a

Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability

A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote att

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservi

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: fix usage of device_get_

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Ar

open-irs is an issue response robot that reponds to issues in the installed repository. The `.env` file was accidentally

The Pi-hole is a DNS sinkhole that protects your devices from unwanted content without installing any client-side softwa

A vulnerability in Brocade SANnav exposes Kafka in the wan interface. The vulnerability could allow an unauthenticated

An issue in `.npmrc` support in Deno 1.44.0 was discovered where Deno would send `.npmrc` credentials for the scope to t

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Swings Coupon Referral Program.This issue

The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file