ZOHO ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in ZOHO ManageEngine ADSelfService Plus 6401 and prior versions, which stems from susceptibility to...

The vulnerability of the Remote Access Connection Manager (RASMan) service for Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s...

WordPress plugin NextScripts Social Networks Auto-Poster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

Sensitive Information Disclosure

ezsystems/repository-forms is vulnerable to Sensitive Information Disclosure. The vulnerability is caused due to missing permission checks before allowing access to user data. Specifically, the system did not properly verify if the user had the 'content' edit permissions, which allowed...

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP arises from incorrect restrictions on XML links to external objects. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...

The vulnerability of Telit Cinterion modem microprogramming software, related to the disclosure of information through variable environments, allows a intruder to gain access to protected information.

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information through variable environments. Exploiting this vulnerability can allow an intruder to gain access to protected information...

PT-2024-6698 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the annotation handler of Foxit PDF Reader, which can allow an attacker to disclose sensitive information by opening a specially...

PT-2024-6418 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to an out-of-bounds read in the memory buffer when parsing U3D files in PDF-XChange Editor. This can allow an attacker to disclose sensitive information by...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to disclose protected information.

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in its ability to read data beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit that allows an attacker to bypass memory buffers, thereby enabling them to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 allows a perpetrator to disclose protected information.

The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 is related to the ability to bypass authentication due to a software bug. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the FortiADC application delivery controller, related to the disclosure of system data that is not authorized for the controlled area, allows a perpetrator to view arbitrary data.

The vulnerability of the FortiADC application delivery controller is related to the disclosure of system data that are not accessible to those who are not authorized in the controlled area. Exploiting this vulnerability could allow a hacker to access arbitrary data...

The vulnerability of the ljca_new_client_device() function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ljcanewclientdevice function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2024-33761 · Siadmin · Siadmin

Name of the Vulnerable Software and Affected Versions: SiAdmin version 1.1 Description: The issue allows SQL injection via the "/modul/mod kuliah/aksi kuliah.php" parameter in nim. This could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the...

PT-2024-13767 · Intel · Intel Fpga

Name of the Vulnerable Software and Affected Versions: IntelR FPGA products versions prior to 2.9.0 Description: The issue is related to an out of bounds write in the firmware of some IntelR FPGA products. This may allow escalation of privilege and information disclosure. Recommendations: For...

PT-2024-13631 · Intel +1 · Intel Onevpl +1

Name of the Vulnerable Software and Affected Versions: IntelR oneVPL versions prior to 23.3.5 Description: The issue is related to a NULL pointer dereference, which may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior t...

eZ Platform User data disclosure

In eZ Platform v2.3.x it is possible to bypass permission checks in a particular case. This means user data such as name and email but not passwords or password hashes can be read by unauthenticated users. This affects only v2.3.x. If you use v2.2.x or older you are not affected. To install, use...

GHSA-3G43-XFRW-PV5M eZ Platform User data disclosure

In eZ Platform v2.3.x it is possible to bypass permission checks in a particular case. This means user data such as name and email but not passwords or password hashes can be read by unauthenticated users. This affects only v2.3.x. If you use v2.2.x or older you are not affected. To install, use...