To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrote it into pgAdmin's own process environment: as PGPASSWOR...

CVE-2026-116246

To pass a server's password to psql and to the utilities pgAdmin 4 runs as background processes, the server manager wrot

来源摘录 · NVD / GitHub Advisory

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library's logger is configured at DEBUG log level, might al...

CVE-2026-119117

Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the li

来源摘录 · NVD / OSV.dev

A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a command-line argument to an u...

CVE-2026-113496

A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured passw

来源摘录 · NVD

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during ima...

CVE-2026-113495

A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command

来源摘录 · NVD

A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any loc...

CVE-2026-109971

A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-l

来源摘录 · NVD

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with t...

CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the

历史摘要 · 未重新核验 · NVD

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs serializes NetworkConfig secret values into the --network-...

CVE-2026-61670

microsandbox is an easy, fast, local-first microVM runtime and library. Prior to 0.5.10, sdk/rust/lib/runtime/spawn.rs s

历史摘要 · 未重新核验 · NVD

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM) credentials, including plaintext passwords, by inspecti...

CVE-2026-92768

A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine (VM

历史摘要 · 未重新核验 · NVD

A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) c...

CVE-2026-92747

A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running p

历史摘要 · 未重新核验 · NVD

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Manage...

CVE-2026-92745

A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process met

历史摘要 · 未重新核验 · NVD

In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passes the steganography password to the CLI child process on the command line via the --steg...

CVE-2026-81684

In openssl_encrypt (pip package openssl-encrypt) versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9.

历史摘要 · 未重新核验 · NVD

openssl_encrypt before 1.4.9 Information Disclosure via Command Line

CVE-2026-81684

In openssl_encrypt (pip package openssl-encrypt) versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9.

历史摘要 · 未重新核验 · OSV.dev

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive information. A successful exploit of this vulnerability migh...

CVE-2026-65088

NVIDIA NemoClaw contains a vulnerability where an attacker could cause invocation of process using visible sensitive inf

历史摘要 · 未重新核验 · NVD

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's bu...

CVE-2026-76054

Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an a

历史摘要 · 未重新核验 · NVD

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-otp-lock allows System Footprinting. This...

CVE-2026-18915

Invocation of process using visible sensitive information vulnerability in TÜBİTAK BİLGEM Software Technologies Research

历史摘要 · 未重新核验 · NVD

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)

## Summary The fix for [GHSA-rwj8-pgh3-r573](https://github.com/gitpython-developers/GitPython/security/advisories/GHSA

历史摘要 · 未重新核验 · GitHub Advisory

Tanium addressed an information disclosure vulnerability in Connect.

CVE-2026-12139

Tanium addressed an information disclosure vulnerability in Connect.

历史摘要 · 未重新核验 · NVD

An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The client validates Ubuntu Pro APT credentials by executing /us...

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools). The cli

历史摘要 · 未重新核验 · NVD

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM...

CVE-2026-12250

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research

历史摘要 · 未重新核验 · GitHub Advisory

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Domain Joiner allows Excavation. This ...

CVE-2026-12250

Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Research

历史摘要 · 未重新核验 · NVD