7677 matches found
PT-2022-26377 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...
PT-2022-26414 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...
PT-2022-26413 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...
The vulnerability of the Node.js software platform, related to errors in the implementation of authentication procedures, allows attackers to disclose sensitive information that should be protected.
The vulnerability of the Node.js software platform is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...
The vulnerability of the Central Management Console (CMC) component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to disclose protected information or cause service interruptions.
The vulnerability of the Central Management Console CMC component of the SAP BusinessObjects Business Intelligence platform is related to the possibility of manipulating inter-site queries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause...
The vulnerability of the stex_queuecommand_lck() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the stexqueuecommandlck function in Linux operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2022-40709
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o...
CVE-2022-40707
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o...
The vulnerability of the stb_image.h component in the C/C++ Libstb library allows a hacker to access confidential data and also trigger a service denial.
The vulnerability of the stbimage.h component in the C/C++ Libstb library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service interruptions...
Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium (CVE-2012-3312)
Abstract Security Bulletin: Sensitive Data Disclosure Vulnerability in IBM Infosphere Guardium CVE-2012-3312 Content SUMMARY: Datasource definition editor sends password in clear text. VULNERABILITY DETAILS: CVE ID: CVE-2012-3312 DESCRIPTION: The datasource definition editor, login and password f...
The vulnerability of the bpf_jit_insn component (arch/s390/net/bpf_jit_comp.c) in the Linux operating system allows a hacker to gain access to confidential data.
The vulnerability of the bpfjitinsn component arch/s390/net/bpfjitcomp.c in the Linux operating system relates to the disclosure of information. Exploiting this vulnerability allows an attacker to gain access to confidential data...
PT-2022-25483 · Trend Micro · Trend Micro Deep Security +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security version 20 Cloud One - Workload Security Agent for Windows affected versions not specified Description: An Out-of-bounds read issue could allow a local attacker to disclose sensitive information on affected...
CVE-2022-33735
There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed...
AZL-39882 CVE-2022-2995 affecting package cri-o for versions less than 1.21.7-2
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute...
CVE-2022-38333
Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function headervalue. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...
The vulnerability of the ps_mix_phase function in the libfaad/ps_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data and also trigger a service failure.
The vulnerability of the psmixphase function in the libfaad/psdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 decoder is related to the lack of checking for the iidindex. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service...
The vulnerability of the WebPage rendering module in WebKitGTK, related to the disclosure of information in erroneous data areas, allows attackers to access confidential data.
The vulnerability of the WebPageRendering module in WebKitGTK relates to the disclosure of information in erroneous data areas. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
...
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
...
