The vulnerability of the Extension.dll library in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. This vulnerability allows attackers to exploit their privileges, cause service failures, and disclose sensitive information.

The vulnerability of the Extension.dll library used in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges, cause service interruptions, and expose sensitive information...

The vulnerability of the Baseboard Management Controller, a controller for remote control of a computer, arises from operations that go beyond the buffer in memory. This allows attackers to disclose sensitive information, enhance their privileges, or cause system failures.

The vulnerability of the Baseboard Management Controller for remote control involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, enhance their privileges, or cause service failures...

CVE-2019-2229

In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8....

PT-2020-3040

Name of the Vulnerable Software and Affected Versions Ansible versions 2.7.x through 2.7.14 Ansible versions 2.8.x through 2.8.6 Ansible versions 2.9.x through 2.9.0 Description The issue is related to the absence of consideration for the no log flag in Ansible's system management configuration...

SAP Treasury and Risk Management Authorization Bypass Vulnerability

SAP Treasury and Risk Management TRM is a finance and risk management solution from SAP. The product is primarily used to analyze and optimize business processes in the area of corporate finance. An authorization bypass vulnerability exists in SAP TRM, which can be exploited by an attacker to gai...

PT-2019-5284

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose...

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME) and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data. This allows attackers to disclose sensitive information, escalate their privileges, or cause service interruptions.

The vulnerability of Microprogrammed Software-Based Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information, enhance their...

Apache NiFi Code Issue Vulnerability

Apache NiFi is a data processing and distribution system of the American Apache Apache Software Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A code issue vulnerability exists in the XMLFileLookupService in Apache NiFi versions 1.3.0...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

The vulnerability of the Form component in the Symfony software development and web application management platform allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Form component in the Symfony software development and web application management platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to disclose sensitive information by sending a specially crafted HTTP request,...

Huawei P20 Improper Access Control Vulnerability

Huawei P20 is a smartphone from Chinese company Huawei Huawei. An improper access control vulnerability exists in the Huawei Share feature in the Huawei P20. The vulnerability can be exploited by an attacker to disclose information by tricking a user into installing a malicious app and establishi...

CVE-2019-8241

Adobe Media Encoder versions 13.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2019-41626)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Media Encoder 13.1 and earlier versions for Window and macOS platforms. An attacker can exploit this vulnerability to obtain sensitive...

VulnCheck KEV: CVE-2019-19985

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure...

UBUNTU-CVE-2019-11135

TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to disclose protected information.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...