CVE-2019-19910

The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 1.35 and/or 1.34 mishandles certain HTML attributes, as demonstrated by IMG onmouseover= impact is XSS and IMG src=http impact is disclosing the client's IP address. This can occur within a talk page topical header that is viewed...

CVE-2019-19910

The MinervaNeue Skin in MediaWiki from 2019-11-05 to 2019-12-13 1.35 and/or 1.34 mishandles certain HTML attributes, as demonstrated by IMG onmouseover= impact is XSS and IMG src=http impact is disclosing the client's IP address. This can occur within a talk page topical header that is viewed...

CVE-2019-19910

The connected records confirm CVE-2019-19910 affects the MinervaNeue Skin in MediaWiki versions from 2019-11-05 to 2019-12-13 (1.34/1.35). The root cause is mishandling of certain HTML attributes, enabling client-side impact via IMG onmouseover= (XSS) and IMG src=http (disclosing the client’s IP)...

U.S. Dept Of Defense: Internal IP Address Disclosed

Target Url https://███████/███████/static/pubsite/js/main-header-dropdown.js?ver=0.87 Summary Hello, I found an internal IP address disclosure in the page. Description: Extracted ip address: ████████ extracted port: ██████ place where I found it: var logoutUrl = 'https://██████:███/█████/logout'...

CVE-2019-16930

CVE-2019-16930 affects Zcashd in Zcash before 2.0.7-3. The issue arises from mishandling exceptions during deserialization of note plaintexts, allowing disclosure of the IP address of a full node that owns a shielded address. This is a network-accessible vulnerability impacting anyone who has dis...

CVE-2019-15726

An issue was discovered in GitLab Community and Enterprise Edition through 12.2.1. Embedded images and media files in markdown could be pointed to an arbitrary server, which would reveal the IP address of clients requesting the file from that server...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-1813)

According to the version of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypas...

CVE-2019-8097

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an internal ip disclosure vulnerability. Successful exploitation could lead to...

CVE-2019-10639

The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols e.g....

CVE-2019-10639

The Linux kernel 4.x starting from 4.1 and 5.x before 5.0.8 allows Information Exposure partial kernel address disclosure, leading to a KASLR bypass. Specifically, it is possible to extract the KASLR kernel image offset using the IP ID values the kernel produces for connection-less protocols e.g....

Information disclosure

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...

CVE-2019-0174

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...

CVE-2019-0174

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...

CVE-2019-0174

Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access...

Partial Physical Address Leakage Advisory

Summary: A potential security vulnerability in some microprocessors may allow partial information disclosure via local access. Vulnerability Details: CVEID: CVE-2019-0174 Description: Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physica...

CVE-2019-9126

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is an information disclosure vulnerability via requests for the routerinfo.xml document. This will reveal the PIN code, MAC address, routing table, firmware version, update time, QOS information, LAN information, and WLAN...

CVE-2014-10079

CVE-2014-10079 affects Vembu StoreGrid 4.4.x. The vulnerability is an information disclosure where the front page of the server web interface leaks the private IP address through a hidden ipaddress form value in the HTML source, caused by incorrect processing of an index.php/ trailing slash. This...

CVE-2018-19120

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address...

Hardcoded credentials

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address...

UBUNTU-CVE-2018-19120

The HTML thumbnailer plugin in KDE Applications before 18.12.0 allows attackers to trigger outbound TCP connections to arbitrary IP addresses, leading to disclosure of the source IP address...