CVE-2024-8509

A vulnerability was found in Forklift Controller. There is no verification against the authorization header except to ensure it uses bearer authentication. Without an Authorization header and some form of a Bearer token, a 401 error occurs. The presence of a token value provides a 200 response wi...

openSUSE Security Advisory (SUSE-SU-2024:2786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-42339

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42339 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42338 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-42337

Technical details (affected products/versions, root cause, impact or remediation) for CVE-2024-42337 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2024-42337 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41700

CVE-2024-41700 relates to Barix SIP Client Web Management and is described across multiple sources as an information-disclosure vulnerability (CWE-200) that allows exposure of sensitive information to an unauthorized actor. NVD/NVD-like entries rate it HIGH with CVSSv3.1: 7.5 (NETWORK, LOW attack...

CVE-2024-41700 Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41696

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41701 AccuPOS – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41701

CVE-2024-41701 affects AccuPOS and corresponds to an information disclosure issue (CWE-200). The publicly referenced data indicate an exposure of sensitive information to an unauthorized actor, with the affected product identified as AccuPOS, specifically noting version 2023.25 in CNNVD. The CVE ...

CVE-2024-41696

CVE-2024-41696 affects the PRI WEB Portal Add-On for Priority ERP on prem. The core issue is CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, indicating information disclosure. Based on the documents, affected software is the PRI WEB Portal Add-On component integrated with Pri...

CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694

CVE-2024-41694 affects Cybonet, an enterprise email security system. The connected documents describe a CWE-200 information disclosure vulnerability where sensitive data can be exposed to an unauthorized actor. The PT-2024-29515 entry notes affected Cybonet versions are not specified and mentions...