CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...

CVE-2024-46383

Hathway Skyworth Router CM5100-511 v4.1.1.24 was discovered to store sensitive information about USB and Wifi connected devices in plaintext...

Brocade SANnav Backup Unauthorized Access

The vulnerability of the software backup function for Brocade SANnav management involves the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-38264: Sensitive Data Storage in Improperly Locked Memory

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

TikTok ordered to close Canada offices following “national security review”

The Government of Canada ordered the TikTok Technology Canada Inc. to close its offices in the country following a national security review. This decision was made in accordance with the Investment Canada Act, which allows for the review of foreign investments that may be injurious to Canada’s...

Filament has exported files stored in default (`public`) filesystem if not reconfigured

All Filament features that interact with storage use the defaultfilesystemdisk config option. This allows the user to easily swap their storage driver to something production-ready like s3 when deploying their app, without having to touch multiple configuration options and potentially forgetting...

Cisco Meeting Server information leakage vulnerability

Cisco Meeting Server Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. An information disclosure vulnerability exists in Cisco Meeting Server, which stems from improper storage of sensitive information in the Web management...

VulnCheck KEV: CVE-2024-8877

Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...

PYSEC-2024-215

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...

CVE-2024-38262: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

CVE-2024-43563: Sensitive Data Storage in Improperly Locked Memory

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

PT-2024-32454 · Agnai · Agnai

Name of the Vulnerable Software and Affected Versions: Agnai versions prior to 1.0.330 Description: A vulnerability in Agnai permits attackers to read arbitrary JSON files at attacker-chosen locations on the server, leading to unauthorized access to sensitive information and exposure of...

CVE-2024-38263: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

NAC Telecommunication NACPremium security vulnerability

NAC Telecommunication NACPremium is an application from NAC Telecommunication, Inc. A security vulnerability exists in NAC Telecommunication NACPremium 01082024 and prior versions, which stems from the unencrypted storage of sensitive information, which could lead to an attacker obtaining embedde...

CVE-2024-42472

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and...

CVE-2024-38137: Sensitive Data Storage in Improperly Locked Memory

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability...

CVE-2024-38131: Sensitive Data Storage in Improperly Locked Memory

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability...

ENTEK SCADA Unauthorized Access

The vulnerability of the SCADA system “ENTEK” is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting traffic or obtaining configuration...

CVE-2024-39732

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791...

CVE-2024-39732

CVE-2024-39732 affects IBM Datacap Navigator 9.1.5–9.1.9. The issue is information disclosure due to data stored temporarily from different environments that could be obtained by a malicious user. Affected versions: 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9. The connected documents describe the root caus...