Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2022-2097)

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the special case of 'in place' encryption...

CVE-2024-6122

An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It also affects NI FlexLogger 2023 Q2 and prior versions which...

The vulnerability in the web client of IBM Datacap Navigator software for document collection and processing allows unauthorized individuals to access system data, enabling them to disclose protected information.

The vulnerability of the IBM Datacap Navigator software for document collection and processing lies in the fact that system data can be disclosed to unauthorized individuals. Exploiting this vulnerability allows a malicious actor to disclose protected information by sending specially crafted HTTP...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the on-premise resource planning software of Microsoft Dynamics 365, related to incorrect authorization, allows a perpetrator to disclose protected information.

The vulnerability of the on-premise resource planning software for Microsoft Dynamics 365 is related to improper authorization. Exploitation of this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

The vulnerability of Windows operating systems, related to processor optimization, the removal or modification of security-critical code, allows attackers to disclose sensitive information.

Vulnerabilities of Windows operating systems are related to optimizations made to the processor, as well as the removal or modification of code that is critical for security. Exploiting these vulnerabilities can allow attackers to disclose sensitive information through attacks via secondary...

The vulnerability of the Unified Endpoint Management system of VMware Workspace ONE allows unauthorized access, as it involves insufficient protection for operational data. This makes it possible for attackers to disclose sensitive information that should be protected.

The vulnerability of the Unified Management System for VMware Workspace ONE endpoints relates to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is supposed to be secure...

The vulnerability of the /downloadFile.php web interface of Netgear WN604 software, which allows a hacker to disclose protected information

The vulnerability of the /downloadFile.php web interface of Netgear WN604 router software lies in the insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the fromVirtualSer function (/goform/VirtualSer) in the Tenda F1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fromVirtualSer function /goform/VirtualSer in the Tenda F1202 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the Finance LOV component of the Oracle Trade Management application, a business automation system of Oracle E-Business Suite, allows a perpetrator to disclose protected information.

The vulnerability of the Finance LOV component in the Oracle Trade Management application of the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to exploit it to disclose protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows attackers to disclose protected information.

The vulnerability of the Security component in the Oracle PeopleSoft Enterprise PeopleTools business application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Core component of the Oracle ZFS Storage Appliance system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle ZFS Storage Appliance Kit exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the fromwebExcptypemanFilter function (/goform/webExcptypemanFilter) in the Tenda F1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda F1202 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

qtbase: qtbase: Delay any communication until encrypted() can be responded to

A vulnerability was found in Qt where, during a TLS connection for servers supporting HTTP2, Qt may send data to a server even if the TLS certificate doesn't match the redirected address. This occurs because Qt fails to validate the certificate against the redirected address, potentially sending...

CVE-2023-42010

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 could disclose sensitive information in the HTTP response using man in the middle techniques. IBM X-Force ID: 265507...

The vulnerability of the IBM InfoSphere Information Server software platform, related to errors in processing user-controlled authentication keys, allows attackers to disclose sensitive information or alter arbitrary data.

The vulnerability of the IBM InfoSphere Information Server software platform is related to an error in the processing of authentication keys controlled by users. Exploiting this vulnerability could allow a malicious actor to disclose protected information or alter arbitrary data...

The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and iOS operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the input/output device management component of the IOHIDFamily in operating systems such as iPadOS and iOS, as well as macOS, allows attackers to disclose protected information.

The vulnerability of the input/output device management component of the IOHIDFamily in iPadOS, iOS, and macOS is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and iOS operating systems is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these systems...