Search Vulnerabilities

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Missing Encryption of Sensitive Data in antrea.io/antrea

Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

dsa-hub-server: Clear-Text Storage of Sensitive Data

Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure

Missing Application-Layer Encryption in Web Interface Endpoints on TP-Link VX800v

Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive

Data Exposure in Kings Information & Network KESS Enterprise

Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X

A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

Dragonfly tiny file download uses hard coded HTTP protocol

Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8

A cryptographic weakness has been identified in the HCL BigFix Service Management (SM)

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a pass...

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13

Ruijie EG306MG strongSwan strongswan.conf missing encryption

Encryption of sensitive data in CapillaryScope missing

IBM Engineering Systems Design Rhapsody information disclosure