CVE-2022-3928

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue. This issue affects FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B...

PT-2022-16037 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 9.5.38, 10.4.33, 11.5.20, and 12.1.1 Description: The issue is related to the lack of handling user-submitted YAML placeholder expressions in the site configuration backend module. This allows attackers to expose...

Information Disclosure

Tcpreplay is vulnerable to information disclosure. The vulnerability exists due to a memory leakage flaw in fixipv6checksums function which allows an attacker to gain access to internal data of the application...

PT-2022-5516 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Office for Mac, which could allow an attacker to gain unauthorized access to protected information...

PT-2022-5457 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for internal data in the Windows operating system kernel. It allows an attacker to disclose protected information. The vulnerability can be...

Information Disclosure

codeigniter4/framework is vulnerable to information disclosure. The vulnerability exists in the setcookie function because it does not reflect setting $secure or $httponly values to true in config or cookie, which exposes them to scripts, allowing an attacker to gain access to internal data...

CVE-2022-36857

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data...

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

PT-2022-23656 · Unknown · Video Editor

Name of the Vulnerable Software and Affected Versions: Video Editor versions prior to SMR Sep-2022 Release 1 Description: The issue allows a local attacker to access internal application data due to an improper authorization vulnerability. Recommendations: For versions prior to SMR Sep-2022 Relea...

CVE-2022-36857: Improper Authorization

Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data...

IBM Security Verify Information Queue 信任管理问题漏洞

IBM Security Verify Information Queue is an integration product from IBM of America, Inc. IBM Security Verify Information Queue version 10.0.2 is vulnerable to a trust management issue stemming from its use of hard-coded credentials used for inbound authentication, outbound communication to...

PT-2022-4078 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows GDI+ affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows GDI+ component, which can be exploited to gain unauthorized access to protected information. This can...

Hardcoded credentials

IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 174142...

IBM Security SiteProtector System 信任管理问题漏洞

IBM Security SiteProtector System is a centralized management system from IBM USA. It is used for unified management and analysis of network, server and desktop endpoint security agents and small networks or devices. A trust management issue vulnerability exists in IBM Security SiteProtector Syst...

PT-2022-3275 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can be exploited to gain unauthorized access to protected information. This can allow...

PT-2022-2727 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in Moodle where global search results could include author information on some activities where a user may not otherwise have access to it. The vulnerability is related to...

Samsung Bixby Vision Information Disclosure Vulnerability

Samsung Bixby Vision is a vision feature from Samsung, a South Korean company. An information disclosure vulnerability exists in versions of Bixby Vision prior to 3.7.50.6, which could be exploited by an attacker to access internal Bixby Vision data with unprotected intent...

CVE-2022-24003

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent...

PT-2022-16405

Name of the Vulnerable Software and Affected Versions Bixby Vision versions prior to 3.7.50.6 Description The issue allows attackers to access internal data of Bixby Vision via an unprotected intent, potentially exposing sensitive information. Recommendations For versions prior to 3.7.50.6, updat...