4006 matches found
CVE-2024-42338
Technical details for CVE-2024-42338 are not provided in the supplied documents. Monitor for updates.
CVE-2024-42337 CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-42337
Technical details (affected products/versions, root cause, impact or remediation) for CVE-2024-42337 are not publicly available in the provided documents. Monitor for updates from official advisories.
IMAPServer (=0.2.0), IMAPServer-cli (=0.1.0) +369 more potentially affected by unknown CVE via diesel (>=0.10.1 <=2.2.12)
diesel CARGO version =0.10.1, =0.1.0, =0.1.0, =0.1.0, =0.4.0, =0.1.4, =0.1.11, =0.1.0, =0.5.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0365...
CVE-2024-7986 Rockwell Automation ThinManager® ThinServer™ Information Disclosure
A vulnerability exists in the Rockwell Automation ThinManager® ThinServer that allows a threat actor to disclose sensitive information. A threat actor can exploit this vulnerability by abusing the ThinServer™ service to read arbitrary files by creating a junction that points to the target directo...
CVE-2024-7986
CVE-2024-7986 affects Rockwell Automation ThinManager ThinServer. The vulnerability allows reading arbitrary files by abusing ThinServer to create a junction pointing to a target directory (information disclosure). Affected ThinServer versions include 11.1.0–11.1.7, 11.2.x, 12.x, 13.x (per PT-202...
No, not every Social Security number in the U.S. was stolen
My current least favorite thing about the churn of social media that Ive seen over the past week is waves of stories, posts and videos saying that every U.S. citizens Social Security number has been stolen or potentially viewed by a threat actor. The claim comes from a class action lawsuit filed ...
New 'ALBeast' Misconfiguration Exposes Weakness in AWS Application Load Balancer
As many as 15,000 applications using Amazon Web Services' AWS Application Load Balancer ALB for authentication are potentially susceptible to a configuration-based issue that could expose them to sidestep access controls and compromise applications. That's according to findings from Israeli...
North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign
A new remote access trojan called MoonPeak has been discovered as being used by a state-sponsored North Korean threat activity cluster as part of a new campaign. Cisco Talos attributed the malicious cyber campaign to a hacking group it tracks as UAT-5394, which it said exhibits some level of...
CVE-2022-26327
OpenText Performance Center (Windows) 12.63 is affected by CVE-2022-26327, described as Exposure of Sensitive Information to an Unauthorized Actor, enabling retrieval of embedded sensitive data. Connected sources (PT Security PT-2024-11542) confirm the vulnerable version (12.63) and recommend upd...
CVE-2022-26327 Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63...
CVE-2022-26327 Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63...
CVE-2024-41700
Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41698
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41700
CVE-2024-41700 relates to Barix SIP Client Web Management and is described across multiple sources as an information-disclosure vulnerability (CWE-200) that allows exposure of sensitive information to an unauthorized actor. NVD/NVD-like entries rate it HIGH with CVSSv3.1: 7.5 (NETWORK, LOW attack...
CVE-2024-41700 Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41700 Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Barix – CWE-200 Exposure of Sensitive Information to an Unauthorized Actor...
CVE-2024-41698
Technical details for CVE-2024-41698 are not publicly provided in the connected documents. Monitor for updates; no explicit affected products, versions, vectors, or fixes are disclosed in the supplied materials.