CVE-2015-4991: Exposure of Sensitive Information to an Unauthorized Actor

IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes unspecified cleartext data in memory dumps, which allows local users to obtain sensitive information by reading a dump file...

Huawei Document Security Management Local Information Disclosure Vulnerability

Huawei Document Security Management DSM is a set of document rights management software from Huawei, China. The software is characterized by high stability, reliability and scalability. A security vulnerability exists in Huawei DSM using software versions prior to V100R002C05SPC661, which stems...

Linux kernel local information disclosure vulnerability (CNVD-2016-00090)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in Linux kernel. An attacker could exploit this vulnerability to cause a memory leak and obtain sensitive information...

OpenStack Nova Local Information Disclosure Vulnerability (CNVD-2015-08535)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. A local information disclosure...

PT-2015-7562 · Sos +3 · Sos +3

Name of the Vulnerable Software and Affected Versions: SoS versions 3.x Description: The issue allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by...

IBM Java SDK Local Information Disclosure Vulnerability

IBM Java SDK is a Java implementation platform. A local information disclosure vulnerability exists in IBM Java SDK. Allowing local attackers can exploit the vulnerability to obtain sensitive information...

Kaspersky Small Office Security Local Information Disclosure Vulnerability

Kaspersky Small Office Security is a suite of antivirus software for small and medium-sized businesses from Russia's Kaspersky Lab. A local information disclosure vulnerability exists in Kaspersky Small Office Security. A local attacker could exploit this vulnerability to obtain sensitive...

Baidu really fixed all of the WormHole vulnerability?-vulnerability warning-the black bar safety net

You can’t have a back door in the software because you can’t have a back door that's only for the good guys.“ - Apple CEO Tim Cook You should not give software to install the back door, because you can't guarantee that this Backdoor only the good guys can use the--Apple CEO cook 0×0 developments...

Kaspersky Total Security Multi-Device MD5 Local Information Disclosure Vulnerability

Kaspersky Total Security Multi-Device is a multi-device security suite. A local information disclosure vulnerability exists in Kaspersky Total Security Multi-Device, which can be exploited by local attackers to obtain sensitive information for brute force attacks...

Kaspersky Endpoint Security for Windows MD5 Local Information Disclosure Vulnerability

Kaspersky Endpoint Security for Windows is a suite of Windows-based security software that provides digital threat protection for business users. A local information disclosure vulnerability exists in Kaspersky Endpoint Security for Windows, which can be exploited by local attackers to obtain...

CVE-2015-7368

Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache...

CVE-2015-1015: Exposure of Sensitive Information to an Unauthorized Actor

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file...

HP Universal Configuration Management Database Server (UCMDB) Local Information Disclosure (HPSBGN03504)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is affected by an unspecified local information disclosure vulnerability. A local attacker can exploit this to gain access to admin or root password information. C Tenable Network Security,...

CVE-2015-7238: Undefined Security Weakness

The Secondary server in Threat Intelligence Exchange TIE before 1.2.0 uses weak permissions for unspecified 1 configuration files and 2 installation logs, which allows local users to obtain sensitive information by reading the files...

PT-2015-2096

Name of the Vulnerable Software and Affected Versions XNU in Apple iOS versions prior to 9 Description The issue is related to a lack of protection for internal data in the XNU kernel component of the iOS operating system. This could allow a local attacker to access protected information stored i...

Microsoft Multiple Application Local Information Disclosure Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability exists in Microsoft Windows that allows remote attackers to exploit a separate vulnerability in IE running in EPM protected mode to provide special command line parameters to Excel, Notepad, PowerPoint, Visio, or Word to vi...

Multiple Microsoft Products CVE-2015-2423 Local Information Disclosure Vulnerability

Description Multiple Microsoft products are prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2010 SP2 32-bit editions Microsoft...

CVE-2015-1009: Exposure of Sensitive Information to an Unauthorized Actor

Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file...

IBM SDK Java Security Components Local Information Disclosure Vulnerability

The IBM SDK is an integrated toolkit for creating, discovering, invoking, and testing Web services. The IBM SDK stores plaintext data into memory, allowing a local attacker to exploit vulnerabilities to gain access to sensitive information...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2381 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5...