CVE-2026-20312: Cisco Catalyst SD-WAN Cleartext Storage
CVE-2026-20312 is a high-severity vulnerability in Cisco Catalyst SD-WAN Software with a CVSS score of 8.8. It involves cleartext storage of sensitive…
Tag: information disclosure
CVE-2026-41703: VMware ESX Out-of-Bounds Read Information Disclosure
An out-of-bounds read vulnerability in VMware ESX with a CVSS score of 7.6. An attacker with VM deployment privileges can trigger information…
VMware ESX Critical VM Escape and Other Vulnerabilities
VMware ESX is affected by a critical VM escape vulnerability (CVE-2026-47876) via the VMXNET3 adapter, along with information disclosure and insufficient logging…
VMware Workstation Patched for Information Disclosure Flaw
VMware Workstation is patched for CVE-2026-41703, an out-of-bounds read vulnerability that could lead to information disclosure.
VMware Fusion Patched for Information Disclosure Flaw
VMware Fusion is patched for CVE-2026-41703, an out-of-bounds read vulnerability that could lead to information disclosure.
CVE-2013-4786: IPMI v2.0 Password Hash Disclosure Vulnerability
CVE-2013-4786 is a high-severity information disclosure flaw in the IPMI v2.0 specification that allows remote attackers to obtain password hashes for valid…
CVE-2025-55190: Argo CD API Token Credential Exposure
A flaw in Argo CD where an API token with basic read access could retrieve Git repository credentials from a project. Patched…
CVE-2026-42880: Argo CD Read-Only User Secret Exposure
A vulnerability in Argo CD allowing read-only users to read plaintext Kubernetes secrets. Patched in May 2026.
PTC FlexPLM
A product lifecycle management software from PTC for retail, footwear, and apparel. Contains a pre-authentication information disclosure flaw in its WSDL endpoint…
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Threat actors are actively exploiting a recently patched medium-severity information disclosure vulnerability in the Gravity SMTP WordPress plugin, which is installed on…