PT-2019-16908

Name of the Vulnerable Software and Affected Versions IBM Cloud Private Kubernetes API server versions 2.1.0, 3.1.0, 3.1.1, 3.1.2 Description The issue allows the IBM Cloud Private Kubernetes API server to be used as an HTTP proxy, potentially exposing not only cluster internal but also external...

MGASA-2018-0477 Updated kio-extras packages fix security vulnerability

The HTML thumbnailer was incorrectly accessing some content of remote URLs listed in HTML files. This meant that the owners of the servers referred in HTML files in your system could have seen in their access logs your IP address every time the thumbnailer tried to create the thumbnail...

MGASA-2018-0476 Updated messagelib packages fix security vulnerability

Some HTML emails can trick messagelib into opening a new browser window when displaying said email as HTML. This happens even if the option to allow the HTML emails to access remote servers is disabled in KMail settings. This means that the owners of the servers referred in the email can see in...

ASUS RT-AC58U Information Disclosure Vulnerability

ASUS RT-AC58U is a wireless router product from ASUS. A security vulnerability exists in ASUS RT-AC58U version 3.0.0.4.3806516. The vulnerability can be exploited by a remote attacker to obtain the hostname and IP address by reading the dhcpLeaseInfo data in the HTML source code of the...

Telegram and Telegram Desktop for Windows Information Disclosure Vulnerability

Telegram for Windows is a suite of mobile messaging tools based on the Windows platform.Telegram Desktop aka tdesktop is its desktop application. An information disclosure vulnerability exists in Telegram Desktop version 1.3.14 and Telegram version 3.3.0.0 WP8.1 for Windows, which can be exploite...

Tor Browser Zero-Day Exploit Revealed Online – Patch Now

Zerodium, the infamous exploit vendor that earlier this year offered $1 million for submitting a zero-day exploit for Tor Browser, today publicly revealed a critical zero-day flaw in the anonymous browsing software that could reveal your identity to the sites you visit. In a Tweet, Zerodium share...

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action...

CVE-2014-8570: Exposure of Sensitive Information to an Unauthorized Actor

Huawei S9300, S9303, S9306, S9312 with software V100R002; S7700, S7703, S7706, S7712 with software V100R003, V100R006, V200R001, V200R002, V200R003, V200R005; S9300E, S9303E, S9306E, S9312E with software V200R001; S9700, S9703, S9706, S9712 with software V200R002, V200R003, V200R005; S12708, S127...

PT-2015-7573

Name of the Vulnerable Software and Affected Versions Tails versions prior to 1.7 Description The issue allows remote FTP servers to discover the Tor client IP address by reading a PORT or EPRT command. This occurs because Tails does not prevent automatic fallback from passive FTP to active FTP...

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

Binary data 5786.pasl...

CVE-2010-1189

MediaWiki prior to 1.15.2 is affected by a CSS validation issue that allows editors to link to images on attacker‑controlled sites, enabling collection of IP addresses and other user information. The root cause is the CSS validation check not preventing this behavior. Impact is limited to disclos...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

MSN messenger improper file transfer ip-address field parsing

MSN Messenger bug Release Date: 20/11/03 Discovery date: Sometime around 2001 or 2000 Versions Affected: ------------------ Msn messenger 1.0 - msn messenger 6.0.0602 Windows messenger all versions Not Affected: ------------ Msn Messenger 6.1, trillian, gaim Description: ----------- A bug exists ...

CVE-2002-2184

Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet...

CVE-2002-0209

Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing SLB and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the...

Microsoft IIS 2.03.04.05.05.1 - Internal IP Address Disclosure

Microsoft IIS 2.03.04.05.05.1 - Internal IP Address Disclosure source: https://www.securityfocus.com/bid/1499/info When a remote user attempts to access an area protected by basic authentication with no realm defined, while specifying HTTP 1.0, Microsoft IIS will return an Access Denied error...

CVE-2000-0185

Technical details about CVE-2000-0185 are not publicly provided in the supplied documents. Monitor for updates from official sources for any affected products, scope, impact, and remediation.