Все CVE за последние шесть месяцев, обновляются ежедневно.

Показано 9 из 9

• НизкийCVE-2026-90842Оценка CVSS 3.715 сент. 2026 г.

  A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/currentpassword/dbcurren

  CWE-312CWE-313
• СреднийCVE-2026-14663Оценка CVSS 6.513 авг. 2026 г.

  Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted da

  CWE-313CWE-345postgresql postgresql
• СреднийCVE-2026-8804Оценка CVSS 6.73 июл. 2026 г.

  Puppet resource_api (shipped in Puppet Core 8.x and Puppet Enterprise 2023.8.x and 2025.x) does not preserve the sensitive flag on parameters defined via the resource-api, causing values such as passwords to be stored in cleartext in the agent's local transact

  CWE-312CWE-313
• ВысокийCVE-2026-52783Оценка CVSS 8.226 июн. 2026 г.

  OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages module writes the OneDrive/SharePoint userless OAuth access_token plaintext to Rails.cache under the deterministic key storage.<id>.httpx_acce

  CWE-313
• ВысокийCVE-2026-24349Оценка CVSS 7.19 июн. 2026 г.

  A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unified PC Runtime V17 (All versions), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions), SIMATIC W

  CWE-313siemens simatic_wincc_unified_pc_runtime
• СреднийCVE-2025-4397Оценка CVSS 6.87 мая 2026 г.

  Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.

  CWE-313
• СреднийCVE-2026-6796Оценка CVSS 4.321 апр. 2026 г.

  A vulnerability was determined in Sanluan PublicCMS up to 6.202506.d. Affected is the function log_login of the file core/src/main/java/com/publiccms/controller/admin/LoginAdminController.java of the component Failed Login Handler. This manipulation of the arg

  CWE-312CWE-313
• СреднийCVE-2026-6598Оценка CVSS 4.320 апр. 2026 г.

  A security vulnerability has been detected in langflow-ai langflow up to 1.8.3. The affected element is the function create_project/encrypt_auth_settings of the file src/backend/base/Langflow/api/v1/projects.py of the component Project Creation Endpoint. Such

  CWE-312CWE-313
• СреднийCVE-2026-5531Оценка CVSS 5.35 апр. 2026 г.

  A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /login_credentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on dis

  CWE-312CWE-313