The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to trigger a service failure and expose the protected information.

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

The vulnerability of the Vendure corporate platform lies in improper cleaning of file paths and bypassing directories due to insufficient verification of input data. This allows attackers to disclose protected information or cause service failures.

The vulnerability of the Vendure corporate platform lies in improper cleaning of file paths and bypassing directories due to insufficient verification of input data. Exploitation of this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

Security Bulletin: IBM Concert is vulnerable to sensitive data disclosure (CVE-2024-49354)

Summary IBM Concert is vulnerable to sensitive information disclosure through specially crafted API Calls. Vulnerability Details CVEID:CVE-2024-49354 DESCRIPTION: IBM Concert is vulnerable to sensitive information disclosure through specially crafted API Calls. CWE:CWE-213: Exposure of Sensitive...

WordPress plugin WP Booking System 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafte...

LangChain SQL注入漏洞

LangChain is a LangChain open source framework for developing applications powered by the Large Language Model LLM. A SQL injection vulnerability exists in LangChain version 0.2.5, which stems from SQL injection that can be achieved via prompt injection and could lead to unauthorized data...

CVE-2024-44281

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. Parsing a file may lead to disclosure of user information...

CVE-2024-44279

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. Parsing a file may lead to disclosure of user information...

PT-2024-31102 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description: An out-of-bounds read issue was addressed with improved input validation. Parsing a file may lead to disclosure of user information. Recommendations: For macOS version...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from parsing files that could lead to the disclosure of user information...

The vulnerability of the formLogDnsquery() function (/goform/formLogDnsquery) in the D-Link DIR-619L router’s software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formLogDnsquery function /goform/formLogDnsquery of the D-Link DIR-619L router’s software lies in the fact that the operation’s output is written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of the WebLogic Mgmt component of the Oracle Enterprise Manager for Fusion Middleware software, which is used for management and monitoring purposes, allows a perpetrator to disclose sensitive information that should be protected.

The vulnerability of the WebLogic Mgmt component of the Oracle Enterprise Manager for Fusion Middleware management and monitoring software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which originates from a GET request to /user/getUserList and can result ...

PT-2024-32342 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: The issue is related to a possible out-of-bounds read in the ProtocolMiscHwConfigChangeAdapter::GetData function, located in protocolmiscadapter.cpp. This could lead to local...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which originates from a GET request to /user/getUserType and can result ...

HPESBUX04724 rev.1 - HP-UX Common Internet File System (CIFS), Multiple Vulnerabilities

Potential Security Impact: Local: Compromise of System Integrity, Creation and Deletion of Arbitrary Files, Denial of Service DoS, Directory Traversal, Elevation of Privilege, Gain Unauthorized Access, Unauthorized Access to Data, Unauthorized Disclosure of Information, Unauthorized Privileged...

edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message

A security flaw involving buffer overflow was identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker within the vicinity network to transmit a specifically crafted DHCPv6 proxy Advertise message, resulting in the...

The vulnerability of the SplunkDeploymentServerConfig component of the Splunk Enterprise platform for operational analytics allows a perpetrator to disclose protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system...

The vulnerability of the FMW Control Plugin web interface of the Oracle Enterprise Manager Fusion Middleware Control software platform allows a attacker to disclose sensitive information and gain access to modify, add, or delete data.

The vulnerability of the FMW Control Plugin web interface of the Oracle Enterprise Manager Fusion Middleware software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information and gain access to the ability ...

CVE-2024-7587

Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and...