CVE-2024-47154

Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak...

WordPress plugin WP Data Access SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Arista NG Firewall SQL注入漏洞

Arista NG Firewall is a WEB firewall from Arista USA. Arista NG Firewall suffers from a SQL injection vulnerability that stems from a lack of proper validation before constructing a SQL query using a user-supplied string, resulting in a SQL Injection Arbitrary File Read/Write vulnerability that...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from th...

(0Day) Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within the ReportEntry class. The issue results from the lack...

PT-2024-17752 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to...

Foxit PhantomPDF Multiple Vulnerabilities (Dec-1 2024) - Windows

Foxit PhantomPDF is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foxitsoftware:phantompdf";...

USN-7171-1 phpunit vulnerability

It was discovered that PHPUnit incorrectly handled web requests if exposed to the internet. An attacker could possibly use this issue to achive remote code execution or obtain sensitive information...

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the fact that it stores passwords in an unencrypted form, allowing a malicious individual to exploit this to disclose protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a hacker to disclose the protected information...

The vulnerability of the Ruijie Reyee OS operating system, related to deficiencies in access control to personal information, allows attackers to disclose protected information.

The vulnerability of the Ruijie Reyee OS is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2024-56142 Path Traversal in pghoard

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on th...

CVE-2024-49820

IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man i...

PGHoard 路径遍历漏洞

PGHoard is a PostgreSQL backup daemon and restore tool from Aiven Open Source. It is used to store backup data in cloud object storage. A path traversal vulnerability exists in PGHoard 2.2.2a and earlier versions, which stems from a vulnerability that allows an attacker to gain disk access with t...

PT-2025-3127 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image macOS versions before build 41725 Acronis True Image Windows versions before build 41736 Description: The issue is related to sensitive information disclosure due to missing authentication. This affects the ability to prote...

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to improper resource initialization, allows attackers to disclose sensitive information.

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Intel microprogramming software, related to synchronization errors in control logic, allows attackers to exploit this to disclose protected information.

The vulnerability of Intel microprogramming software is related to synchronization errors in the control logic. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-39669 · Horner Automation · Horner Automation Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation Cscape affected versions not specified Description: The issue is related to a memory corruption vulnerability. This could allow an attacker to disclose information and execute arbitrary code. Recommendations: At the moment,...

GitLab 日志信息泄露漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a log information disclosure vulnerability that stems from...

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform allows a hacker to disclose protected information.

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform is related to the transmission of data in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

PT-2024-17645 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...