Wszystkie CVE z ostatnich sześciu miesięcy, aktualizowane codziennie.

Pokazano 9 z 9

• NiskiCVE-2026-90842Ocena CVSS 3.715 wrz 2026

  A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/currentpassword/dbcurren

  CWE-312CWE-313
• ŚredniCVE-2026-14663Ocena CVSS 6.513 sie 2026

  Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted da

  CWE-313CWE-345postgresql postgresql
• ŚredniCVE-2026-8804Ocena CVSS 6.73 lip 2026

  Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transact

  CWE-312CWE-313
• WysokiCVE-2026-52783Ocena CVSS 8.226 cze 2026

  OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_token plaintext to Rails.cache under the deterministic key storage.<id>.httpx_acce

  CWE-313
• WysokiCVE-2026-24349Ocena CVSS 7.19 cze 2026

  A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC W

  CWE-313siemens simatic_wincc_unified_pc_runtime
• ŚredniCVE-2025-4397Ocena CVSS 6.87 maj 2026

  Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.

  CWE-313
• ŚredniCVE-2026-6796Ocena CVSS 4.321 kwi 2026

  A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_login of the file core/src/main/java/com/publiccms/controller/admin/LoginAdminController.java of the component Failed Login Handler. This manipulation of the arg

  CWE-312CWE-313
• ŚredniCVE-2026-6598Ocena CVSS 4.320 kwi 2026

  A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such

  CWE-312CWE-313
• ŚredniCVE-2026-5531Ocena CVSS 5.35 kwi 2026

  A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on dis

  CWE-312CWE-313