7695 matches found
PT-2024-4913 · Oracle +1 · Virtualbox +1
Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.16 Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to disclose protected information. A low-privileged attacker with logon access to the...
PT-2024-4903 · Oracle · Peoplesoft Enterprise Peopletools
Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the Security component of Oracle PeopleSoft Enterprise PeopleTools. Exploitation of this issue may allow a remo...
The vulnerability of the Azure AI Search search engine, related to the use of pre-installed credentials, allows a perpetrator to disclose protected information.
The vulnerability of the Azure AI Search search engine is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...
CVE-2024-28558
SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...
CVE-2024-29218
Out-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier, KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file...
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
...
The vulnerability of the UEFI loader’s shim, related to reading beyond the field, allows an attacker to disclose protected information.
The vulnerability of the UEFI loader “shim” is related to errors in reading data beyond the boundary, when attempting to verify the SBAT information. Exploiting this vulnerability can allow an attacker to disclose the protected information...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
PT-2024-23657 · Hadsky · Hadsky
Name of the Vulnerable Software and Affected Versions: HadSky version 7.6.3 Description: A Reflected Cross-Site Scripting XSS issue allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component. Recommendations: For HadSky version 7.6.3, update ...
PT-2024-23667 · Eprosima +1 · Eprosima Fast Dds +1
Name of the Vulnerable Software and Affected Versions: eProsima FastDDS versions 2.14.0 and earlier Description: An issue allows a local attacker to cause a denial of service DoS and obtain sensitive information via a crafted max samples parameter in the DurabilityService QoS component...
The vulnerability of the pmproxy component in the monitoring and performance visualization software Performance Co-Pilot (PCP) allows a hacker to execute arbitrary commands.
The vulnerability of the pmproxy component in the Performance Co-Pilot PCP monitoring and performance visualization software relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2024-3318 · WordPress · Wp Encryption
Name of the Vulnerable Software and Affected Versions: WP Encryption plugin for WordPress versions up to, and including, 7.0 Description: The issue is related to insufficient protection of internal data, which can be exploited by a remote attacker to disclose protected information. Specifically,...
PT-2024-2847 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could allow an attacker to inject malicious scripts into vulnerable form fields. This could lead to...
PT-2024-2842 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can lead to the disclosure of...
PT-2024-3140 · Adobe · Illustrator
Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.3, 27.9.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigation...
PT-2024-3029 · Microsoft · Windows Remote Access Connection Manager +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to disclose protected information. There is no information about the...
PT-2024-3026 · Microsoft · Windows Mobile Hotspot +1
Name of the Vulnerable Software and Affected Versions: Windows Mobile Hotspot affected versions not specified Description: The issue is related to the use of an uninitialized pointer in the Windows Mobile Hotspot service, which can allow an attacker to disclose protected information. There is no...
CVE-2024-31817
In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg...