799 matches found
VulnCheck KEV: CVE-2024-8877
Improper neutralization of special elements results in a SQL Injection vulnerability in Riello Netman 204. It is only limited to the SQLite database of measurement data.This issue affects Netman 204: through 4.05...
PYSEC-2024-215
Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...
PT-2024-32454 · Agnai · Agnai
Name of the Vulnerable Software and Affected Versions: Agnai versions prior to 1.0.330 Description: A vulnerability in Agnai permits attackers to read arbitrary JSON files at attacker-chosen locations on the server, leading to unauthorized access to sensitive information and exposure of...
NAC Telecommunication NACPremium 安全漏洞
NAC Telecommunication NACPremium is an application from NAC Telecommunication, Inc. A security vulnerability exists in NAC Telecommunication NACPremium 01082024 and prior versions, which stems from the unencrypted storage of sensitive information, which could lead to an attacker obtaining embedde...
CVE-2024-42472
Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and...
The vulnerability of the SCADA system “ENTEK,” which stems from the storage of critical information in an open manner, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the SCADA system “ENTEK” is related to the storage of critical information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by intercepting traffic or obtaining configuration...
CVE-2024-39732
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791...
CVE-2024-39732
CVE-2024-39732 affects IBM Datacap Navigator 9.1.5–9.1.9. The issue is information disclosure due to data stored temporarily from different environments that could be obtained by a malicious user. Affected versions: 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9. The connected documents describe the root caus...
The vulnerability of the Jenkins Plain Credentials Plugin, related to the unencrypted storage of critical information, allows attackers to gain unauthorized access to protected data.
The vulnerability of the Jenkins Plain Credentials Plugin is related to the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability in the web interface of Netgear DG834Gv5 integrated software for routers allows a hacker to disclose protected information.
The vulnerability in the web-based management interface of Netgear DG834Gv5 integrated software lies in the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to disclose the protected data remotely...
ROS-20240704-08
A vulnerability in the curl program line utility is related to the storage of HSTS data in a file with a too long name, curl can delete the entire contents, causing subsequent requests using the file to be unaware of the HSTS status they should have used. file will be unaware of the status of the...
CVE-2024-6295 udn News App - Insecure Data Storage
udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...
CVE-2024-6295 udn News App - Insecure Data Storage
udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...
The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...
PT-2024-11794 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.16.2-200.fc35.x86 64 Description: The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the hwmon component. This occurs when the clear caseopen function is called with the wrong device...
CVE-2024-25142 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache...
IdentiBot 安全漏洞
IdentiBot is an open source Discord bot at MIT University written in Node.js that is used to verify an individual's affiliation with MIT, grant them a role in the Discord server, and store information about them in a database backend. IdentiBot has a security vulnerability that stems from members...
WordPress plugin Defender Security 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
HDF Group HDF5 安全漏洞
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...
HDF Group HDF5 安全漏洞
HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...