Live August 29, 2026 Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA · EN · FR

Credential Leak

⚔️ Attack Types Related 0

slug: credential-leak

No explanation yet for this tag.

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Remote Code Execution19 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 14

	ID	Title	Severity	Detected
	CVE-2026-62960	Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transport_get_remote_bundle_uri(), fetch_bundle_uri_interna...	High	1 week ago
	CVE-2026-18691	An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable...	High	2 weeks ago
	CVE-2026-67425	Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url	High	1 month ago
	CVE-2026-46622	SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strings in the api_tokens database table. Any...	High	2 months ago
	CVE-2026-46407	Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.3, the backend admin/auth-token endpoint allows an authenticated administrator to...	High	3 months ago
	CVE-2026-44313	SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-44313)	Critical	3 months ago
	CVE-2013-10075	Vulnerability in apache (CVE-2013-10075)	Critical	3 months ago
	CVE-2026-33823	Vulnerability in microsoft (CVE-2026-33823)	Critical	3 months ago
	CVE-2026-35428	Command Injection in microsoft (CVE-2026-35428)	Critical	3 months ago
	CVE-2026-20133 KEV	[KEV] Information Disclosure in Cisco catalyst-sd-wan-manager (CVE-2026-20133)	High	4 months ago
	CVE-2025-2749 KEV	[KEV] Path Traversal in Kentico path-traversal (CVE-2025-2749)	High	4 months ago
	CVE-2026-34197 KEV	[KEV] Vulnerability in Apache activemq (CVE-2026-34197)	High	4 months ago
	CVE-2026-1233	The Text to Speech for WP (AI Voices by Mementor) plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.9.8. This is due to the plugin containing...	High	4 months ago
	CVE-2024-1139	A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote attacker who has basic login credentials to check the pod manifest to discover a re...	High	2 years ago

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →