CVE-2024-23686Medium· 5.3▾ SunlitDependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
0.6% → 0.6%
DependencyCheck for Maven 9.0.0 to 9.0.6, for CLI version 9.0.0 to 9.0.5, and for Ant versions 9.0.0 to 9.0.5, when used in debug mode, allows an attacker to recover the NVD API Key from a log file.
dependency-check >= 9.0.0, <= 9.0.5dependency-check >= 9.0.0, < 9.0.6Upgrade past the affected range:
dependency-check 9.0.6Connected by shared product, vendor, weakness, or advisory.
CVE-2019-1953Medium· 6.5A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to view a password in clear text
CVE-2023-43261High· 7.5An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.
CVE-2026-108325Medium· 6.6Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
CVE-2026-108328Medium· 4.2Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
CVE-2026-114409Medium· 5.7Docker Desktop logs can expose stored third-party credentials
CVE-2026-117341High· 7.7In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log