CVE-2024-41700

CVE-2024-41700 relates to Barix SIP Client Web Management and is described across multiple sources as an information-disclosure vulnerability (CWE-200) that allows exposure of sensitive information to an unauthorized actor. NVD/NVD-like entries rate it HIGH with CVSSv3.1: 7.5 (NETWORK, LOW attack...

CVE-2024-41700 Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41696

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41701

CVE-2024-41701 affects AccuPOS and corresponds to an information disclosure issue (CWE-200). The publicly referenced data indicate an exposure of sensitive information to an unauthorized actor, with the affected product identified as AccuPOS, specifically noting version 2023.25 in CNNVD. The CVE ...

CVE-2024-41701 AccuPOS – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41696

CVE-2024-41696 affects the PRI WEB Portal Add-On for Priority ERP on prem. The core issue is CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, indicating information disclosure. Based on the documents, affected software is the PRI WEB Portal Add-On component integrated with Pri...

CVE-2024-41696 Priority PRI WEB Portal Add-On for Priority ERP on prem – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Priority PRI WEB Portal Add-On for Priority ERP on prem - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694 Cybonet – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-41694

CVE-2024-41694 affects Cybonet, an enterprise email security system. The connected documents describe a CWE-200 information disclosure vulnerability where sensitive data can be exposed to an unauthorized actor. The PT-2024-29515 entry notes affected Cybonet versions are not specified and mentions...

Siemens SIMATIC S7-200 SMART Devices Use of Insufficiently Random Values (CVE-2024-35292)

Affected devices are using a predictable IP ID sequence number. This leaves the system susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack and eventually could allow an attacker to create a denial-of-service condition. This...

Slackware Linux 15.0 / current httpd Multiple Vulnerabilities (SSA:2024-200-01)

The version of httpd installed on the remote host is prior to 2.4.62. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-200-01 advisory. New httpd packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

CVE-2024-27784

Multiple Exposure of sensitive information to an unauthorized actor weaknesses CWE-200 vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files...

CVE-2024-27784

Multiple Exposure of sensitive information to an unauthorized actor weaknesses CWE-200 vulnerability in Fortinet FortiAIOps 2.0.0 may allow an authenticated, remote attacker to retrieve sensitive information from the API endpoint or log files...

CVE-2024-4228

CVE-2024-4228 affects Magarsus Consultancy SSO (Single Sign On) versions 1.0 before 1.1. The vulnerability arises from improper neutralization of special elements used in SQL commands, enabling SQL Injection. Impact is high: exposure of sensitive information, with insufficiently protected credent...

Fortinet FortiClient Information disclosure of folders to exclude from scanning (FG-IR-22-235)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-235 advisory. - An exposure of sensitive information to an unauthorized actor vulnerability CWE-200 in FortiClient for Windows 7.2.0, 7.0...

CVE-2024-30300

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability CWE-200 that could lead to privilege escalation. An attacker could exploit this vulnerability to gain access to sensitive information which may include system or user...

CVE-2024-30300

CVE-2024-30300 affects Adobe FrameMaker Publishing Server versions 2020.3, 2022.2 and earlier. The flaw is an Information Exposure (CWE-200) that could lead to privilege escalation by allowing an attacker to access sensitive information, including system or user privileges, without any user inter...

Siemens S7-200 SMART series uses unsafe random value vulnerability

The S7-200 SMART series is a series of miniature programmable logic controllers that control a variety of small automation applications. A use of insecure random values vulnerability exists in the Siemens S7-200 SMART series, which can be exploited by an attacker to create a denial of service...