Information disclosure.

MISP Information Disclosure via Forged Upload Path

• MISP
• Path traversal
• Information disclosure

dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy

• dgtlmoon changedetection.io
• Information disclosure
• CWE-208

Package URLs can be used to exfiltrate arbitrary INI file values and environment variables

• The Document Foundation LibreOffice
• Information disclosure

WP-CRM System <= 3.4.6 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter

• nofearinc WP-CRM System – Manage Clients and Projects
• Information disclosure

Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows

• laurent22 joplin
• Information disclosure
• Hard-coded credentials

InvenTree: Plugin-settings GET endpoints are readable without authentication

• InvenTree
• Information disclosure
• Broken access control

InvenTree: Administrative staff users can trigger Arbitrary File Read leading to Credential Disclosure

• InvenTree
• Information disclosure
• Server-side request forgery (SSRF)

Sensitive information in log files in Dell Command Powershell Provider (DCPP)

• Dell Command Powershell Provider (DCPP)
• Information disclosure

jshERP through 3.6 Password Hash Disclosure via /user/info

• jishenghua jshERP
• Information disclosure

ntopng: Missing Authorization on System Configuration Backup Download and Listing

• ntopng
• Information disclosure
• Broken access control

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user hol...

• Information disclosure

<3.3.2 · fixed in 3.3.2

GoCD is vulnerable to credential exposure when admins insecurely configure material URLs

• gocd
• Information disclosure
• Hard-coded credentials

ScadaBR Export Project Endpoint export_project.htm EmportDwr.createExportJSON information disclosure

• ScadaBR
• Information disclosure
• Broken access control

nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

• nvm
• Path traversal
• Information disclosure

CRMEB Knowledge-Paid System crmeb_zzff_class 1.4.4 has a backend verification function that returns the wrong type of value, causing errors and leaking sensitive information.

• Information disclosure

Stencil core 4.43.5 is vulnerable to Incorrect Access Control.

• Information disclosure

An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the…

• Information disclosure

D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure

• D-Link DIR-X1860Z
• Information disclosure
• Broken access control

aiyiyi121 SxDevOps settings.py information disclosure

• aiyiyi121 SxDevOps
• Information disclosure
• Broken access control

Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts

• Meow Gallery
• Information disclosure

Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product

• ZTE NX741J
• Information disclosure

OpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged Plaintext

• openpanel
• Information disclosure

WordLift <= 3.54.10 - Unauthenticated Sensitive Information Exposure in JSON-LD REST API Endpoints

• WordLift – AI powered SEO – Schema
• Information disclosure

YS LeadGen – Popups, Opt-ins & Lead Capture <= 2.1.4 - Unauthenticated Information Disclosure in 'ysleadgen_get_captured_data' AJAX Action

• ysinnovations YS LeadGen – Popup Builder, Popup Maker & Form Builder for WordPress | Lead Generation, Email Marketing, Sales, Conversions, Opt-Ins & Subscribers
• Information disclosure

MgoSync 2.1.5 - 2.1.6 - Unauthenticated WooCommerce API Credential Disclosure

• MgoSync
• Information disclosure

Nimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_plugins

• Nimble Page Builder
• Information disclosure

Hide Photos - Secure vault 4.1.0 - Insecure storage of vault media and wallet records in shared external storage

• QUANTUMTECH LTD Hide Photos - Secure vault
• Information disclosure

CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users

• 1Panel-dev CordysCRM
• Information disclosure

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

• Information disclosure
• Hard-coded credentials

<1.6.15 · fixed in 1.6.15

Silent plaintext persistence via unresolved callable database name in encryption schema map

• MongoDB Inc. Mongoid
• Information disclosure

Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

• MongoDB Inc. Mongoid
• Information disclosure

CareCam CM2507 Cleartext Storage of Sensitive Information

• CareCam HMT.CM2507 Firmware
• Information disclosure

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

• IBM Common Licensing
• Information disclosure

IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

• IBM QRadar
• Information disclosure

Multicluster-observability-addon: multicluster-observability-addon: possible unauthenticated debug/metrics endpoint via cmdfactory.newcontrollercommandconfig (confirmed exposed by engineering)

• Red Hat Advanced Cluster Management for Kubernetes 2
• Information disclosure

Multiple vulnerabilities in IBM Controller

• IBM Controller
• Information disclosure

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• Information disclosure

HCL BigFix Service Management is affected by multiple security vulnerabilities.

• HCL Software HCL BigFix Service Management
• SQL injection
• Information disclosure

GPTranslate <= 2.34.6 - Unauthenticated Sensitive Information Exposure in Public Frontend Inline Script

• john-dagelmore GPTranslate – Multilingual AI Translation Agent for WordPress: Translate Your Site with AI
• Information disclosure

Bookit < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure

• Bookit — Booking & Appointment Calendar
• Information disclosure

King Addons for Elementor < 51.1.81 - Contributor+ Private Post Content Disclosure via kng_maintenance_page Shortcode

• King Addons for Elementor
• Information disclosure

NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read.

• Information disclosure

Information disclosure in Google Chrome

• Google Chrome
• Information disclosure

Information disclosure in Google Chrome

• Google Chrome
• Information disclosure

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs

• Information disclosure

>=1.5.0, <1.45.0 · fixed in 1.45.0

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

• Information disclosure

<2.21.0 · fixed in 2.21.0

Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

• Information disclosure

<2.0.16 · fixed in 2.0.16

rhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pages

• edwardkim rhwp
• Information disclosure
• Server-side request forgery (SSRF)

Logs may collect sensitive information

• MongoDB Inc. MongoDB Entity Framework Core Provider
• Information disclosure

punchin-email: Operator inbox (FORWARD_TO) disclosed to correspondents on reply — Cloudflare forward() drops the relay Reply-To

• PunchIn-App punchin-email
• Information disclosure

Steeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secrets

• Information disclosure

<4.3.0 · fixed in 4.3.0

SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure

• SourceCodester Drug Recommendation System
• Information disclosure
• Broken access control

AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target

• Information disclosure
• Hard-coded credentials

>=3.0.9, <3.0.12 || >=2.14.5, <2.16.1 · fixed in 3.0.12, 2.16.1

Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure

• Code injection
• Information disclosure

>=2.0.7, <2.0.11 · fixed in 2.0.11

mport package installation can overwrite existing unmanaged or differently owned files

• MidnightBSD mport
• Path traversal
• Information disclosure

RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

• Information disclosure
• Code injection

<8.4 · fixed in 8.4

Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion

• Information disclosure
• Broken access control

>=12.0.0, <13.15.1 || >=14.0.0-rc1, <17.5.3 || >=18.0.0, <18.0.2 · fixed in 13.15.1, 17.5.3, 18.0.2

Duplicate Advisory: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

• Information disclosure

<=3.11.6 · no fixed version yet

Duplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

• Information disclosure

>=3.11.0, <=3.11.6 · no fixed version yet

Duplicate Advisory: vm2 exposes host HTTPS credentials and TLS traffic through globalAgent

• Information disclosure

>=3.11.3, <=3.11.6 · no fixed version yet