1201 matches found
CVE-2024-11216
Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprinting, Session Hijacking. This issue affects Pik Online: before 3.1.5...
PT-2025-9830 · Unknown · Pik Online
Name of the Vulnerable Software and Affected Versions: Pik Online versions through 05.03.2025 Description: The issue allows for Authorization Bypass Through User-Controlled Key and Exposure of Private Personal Information to an unauthorized actor. This can lead to Account Footprinting and Session...
Azure Linux 3.0 Security Update: opensc (CVE-2023-5992)
The version of opensc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-5992 advisory. - A vulnerability was found in OpenSC where PKCS1 encryption padding removal is not implemented as side- channe...
Ubuntu 24.10 : OpenSSL vulnerabilities (USN-7264-1)
The remote Ubuntu 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7264-1 advisory. It was discovered that OpenSSL clients incorrectly handled authenticating servers using RFC7250 Raw Public Keys. In certain cases, the connection will not...
CVE-2023-31352
A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data...
CVE-2023-31352
A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data...
CVE-2023-31352
CVE-2023-31352 describes a bug in the SEV firmware that may allow a privileged attacker to read unencrypted memory, potentially exposing guest private data. The affected technology is AMD SEV/ASP firmware used for AMD Secure Encrypted Virtualization; Red Hat and other sources cite the same vulner...
CVE-2024-33504
A use of hard-coded cryptographic key to encrypt sensitive data vulnerability CWE-321 in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to decrypt some secrets even if the...
CVE-2024-1738
An incorrect authorization vulnerability exists in the lunary-ai/lunary repository, specifically within the evaluations.get route in the evaluations API endpoint. This vulnerability allows unauthorized users to retrieve the results of any organization's evaluation by simply knowing the evaluation...
PT-2025-2071 · WordPress · Ht Event – Wordpress Event Manager Plugin For Elementor
Name of the Vulnerable Software and Affected Versions: The HT Event – WordPress Event Manager Plugin for Elementor plugin for WordPress versions up to, and including, 1.4.7 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private,...
CVE-2024-12102 Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure
The Typer Core plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.6 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-44172
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15. An app may be able to access contacts...
CVE-2024-44172
CVE-2024-44172 is a macOS privacy issue where an app may access contacts due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, and macOS Sequoia 15. Affected components and exact root cause are described in the Apple se...
CVE-2024-44172
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access contacts...
CVE-2024-10797
The Full Screen Menu for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.7 via the Full Screen Menu Elementor Widget due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,...
CVE-2024-44293
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. A user may be able to view sensitive user information...
CVE-2024-44292
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...
CVE-2024-44292
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.1. An app may be able to access sensitive user data...