Advisories · Weakness

Information disclosure.

Sensitive data exposed to people who shouldn’t see it. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

CVE-2026-47893 CVE record

CVSS 7.5 High

Spring Framework Request Headers Included in Exception Reasons in HandshakeWebsocketService
- Spring Framework
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-59271 CVE record

CVSS 5.3 Medium

Admin password disclosed in BrokerNotAliveException message
- Spring AMQP
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-37069 CVE record

CVSS 5.3 Medium

Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system dir…
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-37065 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-37064 CVE record

CVSS 5.3 Medium

User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the application users via sending a specially crafted POST request…
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-26897 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml co…
- Information disclosure
Not analysed yet 27 Aug 2026
CVE-2026-21808 CVE record

CVSS 4.1 Medium

HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information
- HCLSoftware BigFix Quantum Risk Analyzer
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-58070 CVE record

CVSS 6.8 Medium

Sensitive information in log files in Veeam Backup and Replication
- Veeam Backup and Replication
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-21809 CVE record

CVSS 3.9 Low

HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
- HCLSoftware BigFix Quantum Risk Analyzer
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-77507 CVE record

CVSS 5.3 Medium

Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users
- weblate
- Information disclosure
- Broken access control
Not analysed yet 26 Aug 2026
CVE-2026-62249 CVE record

CVSS 4.3 Medium

Weblate: Restricted-component change history leaked to non-member project users through the nested `GET /api/projects/{slug}/changes/` endpoint
- weblate
- Information disclosure
- Broken access control
Not analysed yet 26 Aug 2026
starlette-admin PyPI

CVSS 5.4 Medium

Starlette-Admin's unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS
- Information disclosure
- Broken access control
<0.16.1 · fixed in 0.16.1

GHSA-6753-gr46-6wpr · CVE-2026-54553 Not analysed yet 26 Aug 2026
CVE-2026-78146 CVE record

CVSS 6.5 Medium

Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
- Simple Newsletter Plugin
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-77758 CVE record

CVSS 5.3 Medium

Stripe Payment Forms by WP Full Pay < 8.5.1 - Unauthenticated Customer Portal Subscription and Billing Data Disclosure via Unconfirmed Session
- Stripe Payment Forms by WP Full Pay
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-77754 CVE record

CVSS 5.3 Medium

Kirki < 6.0.14 - Unauthenticated User and Comment Author Email Disclosure via kirki_get_apis
- Kirki
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-75413 CVE record

CVSS 7.5 High

DocSys V2.02.80 is vulnerable to Any File Download.
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2025-61164 CVE record

CVSS 7.5 High

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.
- Information disclosure
Not analysed yet 26 Aug 2026
CVE-2026-80194 CVE record

CVSS 8.7 High

Kimai before 2.64.0 Missing Authorization via ProjectViewController export
- kimai
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-62865 CVE record

CVSS 8.7 High

TypeBot: Arbitrary server file read via Send Email block attachment path
- baptisteArno typebot.io
- Path traversal
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-72924 CVE record

CVSS 2.1 Low

GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
- cli
- Information disclosure
- CWE-1327
Not analysed yet 25 Aug 2026
CVE-2026-78957 CVE record

CVSS 5.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78981 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79207 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79125 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79246 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79018 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78896 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79147 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79181 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79001 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79124 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79055 CVE record

CVSS 5.1 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79185 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78960 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79075 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79034 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79252 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79220 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79068 CVE record

CVSS 4.3 Medium

Resource exposure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79059 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79291 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78949 CVE record

CVSS 2.9 Low

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79146 CVE record

CVSS 5.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79293 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79242 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79193 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79024 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79287 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78936 CVE record

CVSS 2.9 Low

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78955 CVE record

CVSS 6.5 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79074 CVE record

CVSS 5.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79122 CVE record

CVSS 5.9 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79031 CVE record

CVSS 3.1 Low

Resource exposure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79095 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79144 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79271 CVE record

CVSS 6.5 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78987 CVE record

CVSS 4.3 Medium

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79028 CVE record

CVSS 5.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-78941 CVE record

CVSS 3.1 Low

Information disclosure in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026
CVE-2026-79016 CVE record

CVSS 4.3 Medium

Observable discrepancy in Google Chrome
- Google Chrome
- Information disclosure
Not analysed yet 25 Aug 2026