Total
361 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-37835 | 1 Torguard | 1 Vpn | 2026-06-17 | N/A | 7.5 HIGH |
| Torguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such as credentials and information about the server, without admin privileges. | |||||
| CVE-2022-35513 | 1 Blink1 | 1 Blink1control2 | 2026-06-17 | N/A | 7.5 HIGH |
| The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage. | |||||
| CVE-2022-34354 | 2 Ibm, Linux | 2 Partner Engagement Manager, Linux Kernel | 2026-06-17 | N/A | 4.0 MEDIUM |
| IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424. | |||||
| CVE-2022-34312 | 1 Ibm | 1 Cics Tx | 2026-06-17 | N/A | 4.0 MEDIUM |
| IBM CICS TX 11.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 229447. | |||||
| CVE-2022-33973 | 2 Intel, Microsoft | 3 Wlan Authentication And Privacy Infrastructure, Windows 10, Windows 11 | 2026-06-17 | N/A | 3.3 LOW |
| Improper access control in the Intel(R) WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access. | |||||
| CVE-2022-32867 | 1 Apple | 2 Iphone Os, Macos | 2026-06-17 | N/A | 2.4 LOW |
| This issue was addressed with improved data protection. This issue is fixed in iOS 16, macOS Ventura 13. A user with physical access to an iOS device may be able to read past diagnostic logs. | |||||
| CVE-2022-32833 | 1 Apple | 3 Iphone Os, Macos, Safari | 2026-06-17 | N/A | 5.3 MEDIUM |
| An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history. | |||||
| CVE-2022-30740 | 1 Samsung | 1 Internet | 2026-06-17 | 2.1 LOW | 4.1 MEDIUM |
| Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers. | |||||
| CVE-2022-30361 | 1 Ovaledge | 1 Ovaledge | 2026-06-17 | N/A | 5.3 MEDIUM |
| OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences. | |||||
| CVE-2022-30359 | 1 Ovaledge | 1 Ovaledge | 2026-06-17 | N/A | 4.3 MEDIUM |
| OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserList. Authentication is required. The information disclosed is associated with the all registered users, including user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences. | |||||
| CVE-2022-2815 | 1 Publify Project | 1 Publify | 2026-06-17 | N/A | 6.5 MEDIUM |
| Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10. | |||||
| CVE-2022-28170 | 1 Broadcom | 1 Fabric Operating System | 2026-06-17 | N/A | 6.5 MEDIUM |
| Brocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4.2j store server and user passwords in the debug statements. This could allow a local user to extract the passwords from a debug file. | |||||
| CVE-2022-28168 | 1 Broadcom | 1 Sannav | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| In Brocade SANnav before Brocade SANnav v2.2.0.2 and Brocade SANnav2.1.1.8, encoded scp-server passwords are stored using Base64 encoding, which could allow an attacker able to access log files to easily decode the passwords. | |||||
| CVE-2022-25264 | 1 Jetbrains | 1 Teamcity | 2026-06-17 | 5.0 MEDIUM | 7.5 HIGH |
| In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases. | |||||
| CVE-2022-21823 | 1 Ivanti | 1 Workspace Control | 2026-06-17 | 2.1 LOW | 5.5 MEDIUM |
| A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control <2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector. | |||||
| CVE-2022-20939 | 1 Cisco | 2 Smart Software Manager On-prem, Smart Software Manager Satellite | 2026-06-17 | N/A | 4.3 MEDIUM |
| A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to inadequate protection of sensitive user information. An attacker could exploit this vulnerability by accessing certain logs on an affected system. A successful exploit could allow the attacker to use the obtained information to elevate privileges to System Admin.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. | |||||
| CVE-2022-1257 | 1 Mcafee | 1 Agent | 2026-06-17 | 2.1 LOW | 6.1 MEDIUM |
| Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files. | |||||
| CVE-2022-1044 | 1 Trudesk Project | 1 Trudesk | 2026-06-17 | 4.3 MEDIUM | 6.5 MEDIUM |
| Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1. | |||||
| CVE-2022-0881 | 1 Framasoft | 1 Peertube | 2026-06-17 | 4.0 MEDIUM | 6.5 MEDIUM |
| Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1. | |||||
| CVE-2022-0724 | 1 Microweber | 1 Microweber | 2026-06-17 | 4.0 MEDIUM | 6.5 MEDIUM |
| Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3. | |||||