3215 matches found
Information Disclosure Vulnerability in Various ABB Products (CNVD-2025-13423)
ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...
CVE-2025-40662
Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...
IBM Cloud Pak for Security and IBM QRadar Suite Information Disclosure Vulnerabilities
IBM Cloud Pak for Security is a software application. An open security platform that connects to your existing data sources to generate deeper insights and enables you to take automated action faster.IBM QRadar Suite is an integrated security information and event management SIEM solution for...
Cisco Customer Collaboration Platform Information Disclosure Vulnerability
Cisco Customer Collaboration Platform Cisco CCP is a customer collaboration platform from Cisco USA. Cisco Customer Collaboration Platform suffers from an information disclosure vulnerability that stems from the application's inadequate protection of sensitive information, which can be exploited ...
CVE-2025-47969 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
...
CVE-2025-33063 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33059 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-33059 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-32722 Windows Storage Port Driver Information Disclosure Vulnerability
...
CVE-2025-32720 Windows Storage Management Provider Information Disclosure Vulnerability
...
CVE-2025-32719 Windows Storage Management Provider Information Disclosure Vulnerability
...
Sensitive Information Disclosure
@auth0/nextjs-auth0 is vulnerable to Sensitive Information Disclosure. The vulnerability is due to missing cache control headers due to session cookies being cached by CDNs, potentially exposing sensitive session information to unauthorized users...
CVE-2025-20129
Cisco CCP (Customer Collaboration Platform) Information Disclosure vulnerability affects the web-based chat interface. An unauthenticated, remote attacker can exploit improper sanitization of HTTP requests to the chat interface, potentially persuading targeted users to disclose sensitive data and...
CVE-2025-20129 Cisco Customer Collaboration Platform Information Disclosure Vulnerability
A vulnerability in the web-based chat interface of Cisco Customer Collaboration Platform CCP, formerly Cisco SocialMiner, could allow an unauthenticated, remote attacker to persuade users to disclose sensitive data. This vulnerability is due to improper sanitization of HTTP requests that are sent...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server version 11.7...
IBM Security Guardium 安全漏洞
IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has an information disclosure...
SAP S4CORE Information Disclosure Vulnerability
SAP S4CORE is an application for managing procurement contracts from SAP. SAP S4CORE suffers from an information disclosure vulnerability that stems from a lack of authorization checks, which can be exploited by an attacker to cause information disclosure...
ISC Kea 安全漏洞
ISC Kea is a modern open source DHCPv4 and DHCPv6 server from the ISC organization. A security vulnerability exists in ISC Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8, which stems from the possibility that the log file or lease file may be globally readable, whi...
CVE-2024-5474
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versio...