The vulnerability of the Navidrome media server, related to the lack of protective measures for the SQL query structure, allows attackers to execute arbitrary code and disclose the protected information.

The vulnerability of the Navidrome media server relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information by sending specially crafted SQL queries...

Adobe Dreamweaver 18.0.0 < 18.2.1 / 19.0 < 19.1 Sensitive data disclosure if SMB request is subject to a relay attack (APSB19-21) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 18.2.1, 19.1. It is, therefore, affected by a vulnerability as referenced in the APSB19-21 advisory. - Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source and Adobe Commerce/B2B lies in insufficient validation of input data, allowing attackers to disclose sensitive information.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to disclose sensitive information...

HPESBNS04713 rev.1 - OpenView Performance Mgt., Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information, URL Redirection, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OpenView Performance Mgt. T0684 T0684V01^ABG, T0684V01^ABH, T0684V01^ABI, T0684V01^ABJ, T0684V01^AB...

Dell Secure Connect Gateway 加密问题漏洞

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A cryptographic issue vulnerability exists in Dell Secure Connect Gateway version 5.24.00.14, which arises from the use of a corrupted or risky encryption algorithm, and can be exploited by a low-privileged...

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server allows attackers to escalate their privileges and disclose sensitive information.

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to increase their privileges and disclose sensitive...

CVE-2024-45713

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...

CVE-2024-45713

SolarWinds Kiwi CatTools is affected by CVE-2024-45713, a sensitive data disclosure vulnerability that occurs when a non-default troubleshooting setting is enabled. The issue is described as information disclosure with a local attack vector; the precise affected versions are not consistently spec...

CVE-2024-45713 SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...

Acronis Cyber Files 安全漏洞

Acronis Cyber Files is a secure file synchronization and sharing solution from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Files versions prior to 9.0.0x24, which stems from spelling hijacking that results in the disclosure of sensitive information...

PT-2024-7357 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 3.0.0 JetBrains Ktor versions prior to 2.3.13 Description: The issue is related to improper caching in the HttpCache Plugin, which could lead to response information disclosure. This allows an attacker to...

The vulnerability of the Kernel-Mode Driver component in Windows operating systems allows attackers to disclose sensitive information that is protected by this mechanism.

The vulnerability of the Kernel-Mode Driver component in Windows operating systems is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-33499 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions prior to 9.0.0x24 Description: The issue is related to sensitive information disclosure due to spell-jacking. Recommendations: For versions prior to 9.0.0x24, update to a version equal to or later than...

WordPress plugin Freemius SDK 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Dell OpenManage Enterprise SQL注入漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. A SQL injection vulnerability exists i...

PT-2024-7177 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. Recommendations: At t...

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to insufficient protection of sensitive data, allows attackers to disclose protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to read a subset of accessible data...

PT-2024-10326 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert versions 1.0.0 through 1.0.2 Description: The issue is related to sensitive information disclosure through specially crafted API calls. It is associated with insufficient protection of service data due to the use of incompatible...