Information disclosure.

Windows Defender Firewall Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Microsoft SQL Server Information Disclosure Vulnerability

• Microsoft SQL Server 2025 (CU8)
• Microsoft SQL Server 2025 for x64-based Systems (GDR)
• Information disclosure

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Win32k Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Wireless Wide Area Network Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Memory corruption
• Information disclosure

Windows Kernel Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Error Reporting Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows Print Spooler Components Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Memory corruption
• Information disclosure

Microsoft Windows Search Component Information Disclosure Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Information disclosure

Windows Kernel Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Information disclosure

Windows MIDI Service Module Information Disclosure Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Information disclosure

Unauthenticated Account Information Disclosure in Multiple Omada Controllers

• TP-Link System Inc. Omada Software Controller
• TP-Link Systems Inc. OC200 V1
• Information disclosure

Mali GPU Kernel Driver allows access to sensitive kernel information

• Arm Ltd Valhall GPU Kernel Driver
• Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver
• Information disclosure

Duplicate Advisory: Sensitive information written to logs by Snowflake drivers

• Information disclosure

* · no fixed version yet

TYPO3-CORE-SA-2026-022: Information Disclosure via Backend Localization Wizard

• Information disclosure
• Broken access control

>=10.0.0, <10.4.60 || >=11.0.0, <11.5.54 || >=12.0.0, <12.4.49 || >=13.0.0, <13.4.35 || >=14.0.0, <14.3.7 · fixed in 10.4.60, 11.5.54, 12.4.49, 13.4.35, 14.3.7

code-projects Student Crud Operation Backup File card_activation.sql information disclosure

• code-projects Student Crud Operation
• Information disclosure
• Broken access control

ASUS Armoury Crate: Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury…

• ASUS Armoury Crate
• Information disclosure

Information Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server

• SAP_SE SAP Web Dispatcher, Internet Communication Manager and SAP Content Server
• Information disclosure

Information disclosure in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Information disclosure

Sensitive information in log files in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Information disclosure

Information disclosure in JetBrains YouTrack

• JetBrains YouTrack
• Information disclosure

Cleartext storage of sensitive information in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Information disclosure

Sensitive information in log files in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Information disclosure

light0011 cms Debug Mode config.php information disclosure

• light0011 cms
• Information disclosure
• Broken access control

MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

• MISP
• Information disclosure
• Broken access control

MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

• MISP
• Information disclosure
• Server-side request forgery (SSRF)

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

• MISP
• Information disclosure
• Broken access control

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

• MISP
• Information disclosure
• Broken access control

code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

• code-projects Hospital Information System
• Information disclosure
• Broken access control

jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure

• jaychouchannel Tourism-Management-System
• Information disclosure
• Broken access control

SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage

• SourceCodester Syllabus-Aligned Learning Management & Examination System
• Information disclosure
• CWE-310

domain-scoped PSL domain cookie

• curl
• Information disclosure

secure cookie attribute bypass with tab

• curl
• Information disclosure

code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

• code-projects Hotel and Tourism Reservation in PHP
• Information disclosure
• Broken access control

code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure

• code-projects Daily Expense Manager
• Information disclosure
• Broken access control

WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter

• WWBN AVideo
• Information disclosure

Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit

• Path traversal
• Information disclosure

<0.47.5 · fixed in 0.47.5

EmbedPress 4.6.0 - 4.6.3 - Contributor+ Administrator Email Disclosure via Google Reviews REST Route

• EmbedPress
• Information disclosure

The Events Calendar &lt; 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API

• The Events Calendar
• Information disclosure

My Private Site < 4.2.3 - Unauthenticated Sensitive Information Exposure via RSS Feeds and Sitemap

• My Private Site
• Information disclosure

Post Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_id

• Smart Post
• Information disclosure

JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset

• JetFormBuilder — Dynamic Blocks Form Builder
• Information disclosure

vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

• Information disclosure

<0.26.0 · fixed in 0.26.0

PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Path traversal
• Information disclosure

PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Path traversal
• Memory corruption

CodeWhale: Argument Injection in `git_blame` Tool Allows Arbitrary File Read Without Approval

• Command injection
• Information disclosure

>=0.8.41, <0.8.64 · fixed in 0.8.64

CodeWhale: js_execution leaks parent environment to model context via missing env scrub

• Information disclosure
• CWE-526

>=0.8.41, <0.8.64 · fixed in 0.8.64

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

• Path traversal
• Information disclosure

>=0.8.41, <0.8.64 · fixed in 0.8.64

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Information disclosure

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Information disclosure

IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution

• IBM ContextForge MCP Gateway
• Information disclosure

IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []

• i
• Information disclosure

Langflow is vulnerable to information disclosure due to cross-user MCP tool cache collision and incomplete secret scrubbing on public flows

• IBM Langflow OSS
• Information disclosure

IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

• IBM App Connect Enterprise
• IBM Integration Bus for z/OS
• Information disclosure

code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

• code-projects Vehicle Management System
• Information disclosure
• Broken access control

phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export

• thorsten phpMyFAQ
• Information disclosure

Apache Allura: Information exposure via search

• Apache Software Foundation Apache Allura
• Information disclosure

Xing Inc. XING CPTrans-ME-X: XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized…

• Xing Inc. XING CPTrans-ME-X
• Information disclosure

Xpro Elementor Addons < 1.7.8 - Unauthenticated Draft/Private Product Disclosure via Quick View

• Xpro Addons — 140+ Widgets for Elementor
• Information disclosure