The vulnerability of the /core/authorize.php file in the Drupal CMS system allows a hacker to disclose protected information.

The vulnerability of the /core/authorize.php file in the Drupal CMS system relates to the exposure of system data by unauthorized individuals in the controlled area. Exploiting this vulnerability could allow attackers to disclose protected information through the hashsalt parameter in the...

The vulnerability of the query_ptask_lean function in the MCUDBHelper component of the PowerPanel Enterprise monitoring and power source management system allows a perpetrator to disclose protected information.

The vulnerability of the queryptasklean function in the MCUDBHelper component of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to disclose...

The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras allows a intruder to disclose protected information or cause a malfunction in the service.

The vulnerability of the Message Handler component in the DS-7604NXI-K1/4P microprogramming system for IP cameras involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause malfunctions in the...

PT-2024-7441 · Draytek +1 · Draytek Vigor310 +1

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor310 versions through 4.3.2.6 Description: The issue is related to insufficiently robust encryption of data, which may allow a remote attacker to disclose protected information and perform a man-in-the-middle MITM attack...

The vulnerability of the cups-browsed daemon on print servers in CUPS allows a attacker to execute arbitrary code and expose sensitive information.

The vulnerability of the cups-browsed server on CUPS printing systems is related to the use of dangerous methods or functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and disclose sensitive information by sending a specially crafted...

PT-2024-6711

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to incorrect security checks for standard elements in the V8 JavaScript engine handler. This could allow a remote...

The vulnerability of the Skia graphic library used by Microsoft Edge and Google Chrome browsers allows attackers to expose protected information or compromise data integrity.

The vulnerability of the Skia graphic library in Microsoft Edge and Google Chrome is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information or compromise data integrity through a specially crafted HTML page...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows a hacker to execute arbitrary code, cause a service failure, or disclose protected information.

The vulnerability of the PDFium PDF-content processor in Google Chrome browser involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, cause service failures, or disclose protected information by sending a...

The vulnerability in the FillColorRow4 function of the utils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the FillColorRow4 function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to gain...

PT-2024-32660 · Revoworks · Revoworks Cloud Client

Name of the Vulnerable Software and Affected Versions: RevoWorks Cloud Client versions 3.0.91 and earlier Description: The issue is related to an incorrect authorization vulnerability. If exploited, it may allow unintended processes to be executed in the sandbox environment. Although the local...

The vulnerability of the setLanguageCfg() function (/www/cgi-bin/cstecgi.cgi) in the TOTOLINK EX1200L router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setLanguageCfg function /www/cgi-bin/cstecgi.cgi of the TOTOLINK EX1200L router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows a hacker to execute arbitrary code, cause a service failure, or disclose protected information.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code, cause service failures, or disclose sensitive information by sending a specially...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created U3D file...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created JB2 file...

PT-2024-28886 · Openpetra · Openpetra

Name of the Vulnerable Software and Affected Versions: openPetra version 2023.02 Description: A Cross Site Scripting XSS issue allows a remote attacker to obtain sensitive information. The attacker can exploit this via the "serverMPersonnel.asmx" function. Recommendations: For openPetra version...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the NBD library protocol, related to incorrect certificate verification, allows attackers to disclose protected information and compromise the integrity of the system.

The vulnerability of the NBD protocol of the libnbd library is related to improper verification of the NBD server’s certificate when TLS is used for connecting to the NBD server. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and compromise the integri...

Entrust Instant Financial Issuance 安全漏洞

Entrust Instant Financial Issuance Entrust Cardwizard is an instant financial card issuance solution from Entrust Corporation, USA. A security vulnerability exists in Entrust Instant Financial Issuance that stems from the configuration file WebAPI.cfg.xml left behind after installation without...

The vulnerability of the buffer.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...