Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve th...

CVE-2026-77123

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account hold

历史摘要 · 未重新核验 · NVD

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience for Drupal allows Forceful Browsing. This issue affects ...

CVE-2026-81162

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience

历史摘要 · 未重新核验 · NVD

DXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-112

CVE-2026-81162

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal DXPR Builder: The Best Editing (AI) Experience

历史摘要 · 未重新核验 · OSV.dev

pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

## Summary pnpm expands `${VAR}` environment placeholders in the `httpProxy` / `httpsProxy` / `noProxy` settings read f

历史摘要 · 未重新核验 · GitHub Advisory

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <...

CVE-2026-81280

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions.

历史摘要 · 未重新核验 · GitHub Advisory

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions.

CVE-2026-81280

Subscriber Sensitive Data Exposure in Print Barcode Labels for your WooCommerce products/orders <= 4.0.0 versions.

历史摘要 · 未重新核验 · NVD

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prior to 4.9.1 and 2.44.1, urllib follows redirects through f...

CVE-2026-55553

urllib is an HTTP client for Node.js that supports authentication, redirects, timeouts, and other request features. Prio

历史摘要 · 未重新核验 · NVD

urllib's cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

CVE-2026-55553

## Summary urllib supports redirect-following through `followRedirect`, which is expected behavior for an HTTP client.

历史摘要 · 未重新核验 · GitHub Advisory

Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

CVE-2026-66585

Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

历史摘要 · 未重新核验 · NVD

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, allowing attackers to exfiltrate stored secrets. An MCP cl...

CVE-2026-59809

SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, a

历史摘要 · 未重新核验 · NVD

Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/http/client.r...

CVE-2026-63481

Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier,

历史摘要 · 未重新核验 · NVD

Hurl: Cookies in Cookies section leak when redirecting to a different host

CVE-2026-63481

Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier,

历史摘要 · 未重新核验 · OSV.dev

Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contact_id_offer / contact_id_event) instead o...

CVE-2026-75953

Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from th

历史摘要 · 未重新核验 · NVD

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.

CVE-2026-73386

Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.

CVE-2026-73384

Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

CVE-2026-74008

Unauthenticated Sensitive Data Exposure in Shortcodes and extra features for Phlox theme <= 2.17.22 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.

CVE-2026-66463

Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.

历史摘要 · 未重新核验 · NVD

Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.

CVE-2026-66443

Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.

历史摘要 · 未重新核验 · NVD

Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.

CVE-2026-28174

Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.

历史摘要 · 未重新核验 · NVD

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/project endpoint exposes sensitive project configuration dat...

CVE-2026-47717

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. In fuxa-server version 1.3.0, the GET /api/pro

历史摘要 · 未重新核验 · NVD