11059 matches found
kernel: wifi: iwlwifi: fw: fix memory leak in debugfs
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fwinfo file all the way, since we return NULL indicating no more data, but don't free the status tracking object...
kernel: Linux kernel xHCI DbC: Denial of Service via memory leak
A flaw was found in the Linux kernel's xHCI Debug Capability DbC module. A local user with low privileges could exploit a memory leak in the xhciallocdbc function. This occurs when the DbC is already in use, and allocated memory for the xhcidbc structure is not properly released. This vulnerabili...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Liquidweb Restrict_Content
CVE-2023-47668 Restrict Content = 3.2.7 - Information Expo...
CVE-2022-43666: Exposure of Sensitive System Information Due to Uncleared Debug Information
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access...
PT-2023-7381
Name of the Vulnerable Software and Affected Versions FortiSIEM versions 5.3.3 and below FortiSIEM versions 5.4.0 FortiSIEM versions 6.1.2 and below FortiSIEM versions 6.2.1 and below FortiSIEM versions 6.3.3 and below FortiSIEM versions 6.4.2 and below FortiSIEM versions 6.5.1 and below FortiSIE...
CVE-2023-45585: Insertion of Sensitive Information into Log File
An insertion of sensitive information into log file vulnerability CWE-532 in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, versi...
CVE-2023-26516
Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...
CVE-2023-26516
Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...
CVE-2023-26516 WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...
CVE-2023-26516
CVE-2023-26516 is a CSRF vulnerability in the WordPress WPIndeed Debug Assistant plugin (versions ≤ 1.4). The described root cause is unauthorized CSRF execution that can affect unauthenticated users, with impacts stated as high confidentiality, integrity, and availability by CVSS 3.1 metrics (8....
PT-2023-20695 · WordPress · Wpindeed Debug Assistant
Name of the Vulnerable Software and Affected Versions: WPIndeed Debug Assistant plugin versions 1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...
CVE-2023-26516: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in WPIndeed Debug Assistant plugin = 1.4 versions...
WordPress Plugin Debug Assistant Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists i...
CVE-2023-4804
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
CVE-2023-4804
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
Code injection
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...
CVE-2023-4804
CVE-2023-4804 affects Johnson Controls Quantum HD Unity family. The root cause is an active debug code/debug features accidentally exposed, allowing an unauthorized user to access debugging functionality. Affected products and versions include: Quantum HD Unity Compressor panels (Q5: all versions...
