Total
491 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-62305 | 2026-10-07 | N/A | 5.1 MEDIUM | ||
| HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allow exposure of data to external systems under specific conditions. | |||||
| CVE-2025-62308 | 2026-10-07 | N/A | 5.1 MEDIUM | ||
| HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details, which may potentially assist in further analysis or targeted actions under certain conditions | |||||
| CVE-2025-69132 | 2026-10-06 | N/A | 6.5 MEDIUM | ||
| Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions. | |||||
| CVE-2026-66666 | 2026-10-06 | N/A | N/A | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9. | |||||
| CVE-2026-103957 | 2026-10-06 | N/A | 6.2 MEDIUM | ||
| Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the deployment and to cause the application to issue requests to arbitrary internal network locations, via a crafted discovery document address supplied when registering a tool server or remote agent configured for delegated authentication. To remediate this issue, users should upgrade to version 1.7.0 or later. | |||||
| CVE-2026-104402 | 2026-10-06 | N/A | 4.3 MEDIUM | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magic MCP: from n/a through 0.5.6. | |||||
| CVE-2026-39791 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. | |||||
| CVE-2026-103335 | 2026-10-06 | N/A | N/A | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensitive Data.This issue affects Video Conferencing with Zoom: from n/a through 4.6.10. | |||||
| CVE-2026-41562 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. | |||||
| CVE-2026-105071 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions. | |||||
| CVE-2026-105068 | 2026-10-06 | N/A | 5.3 MEDIUM | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: from n/a through 7.4.5. | |||||
| CVE-2026-103334 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24. | |||||
| CVE-2026-41563 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions. | |||||
| CVE-2026-41559 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. | |||||
| CVE-2026-104399 | 2026-10-06 | N/A | N/A | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.124. | |||||
| CVE-2026-104385 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. | |||||
| CVE-2026-39729 | 2026-10-06 | N/A | 7.2 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. | |||||
| CVE-2026-97307 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17. | |||||
| CVE-2026-42413 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions. | |||||
| CVE-2026-41561 | 2026-10-06 | N/A | 7.5 HIGH | ||
| Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. | |||||