Microsoft Office Buffer Overflow Info Disclosure

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Android handleBondStateChanged Disclosure

The vulnerability of the handleBondStateChanged method in the AdapterService.java class of Android operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

Mattermost Account Blocking Disclosure

The vulnerability of the Mattermost instant messaging application is related to an overly restrictive mechanism for blocking user accounts. Exploiting this vulnerability could allow a malicious actor to disclose protected information and block external LDAP accounts...

MapUrlToZone Disclosure

The vulnerability of the MapUrlToZone method in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Data Domain OS Path Traversal

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

NVIDIA Guest Driver Virtual GPU Manager Disclosure

The vulnerability of the Guest driver components and the Virtual GPU Manager driver of NVIDIA graphics processors is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

Android setRingtoneUri Ringtone Disclosure

The vulnerability of the setRingtoneUri function in the VoicemailNotificationSettingsUtil.java module of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow an attacker to disclose protected information...

Adobe After Effects Buffer Overflow Info Disclosure

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer memory boundary. Exploiting this vulnerability can allow attackers to disclose protected information by sending a specially created malicious file...

Business Chat Function Disclosure Protected Information

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Cortex XDR Broker VM Disclosure

The vulnerability of the Broker VM component in the Cortex XDR security platform is related to improper protection of the alternative path. Exploiting this vulnerability can allow an attacker to disclose protected information...

Grub2 BFS Disclosure

The vulnerability of the BFS file system of the Grub2 operating system is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Siri Disclosure Information Disclosure

The vulnerability of the personal assistant Siri in operating systems such as macOS, iOS, and iPadOS is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to disclose protected information...

MIR KT-51 FTP Disclosure

The vulnerability of the FTP protocol implementation in the MIR KT-51 software controller and the MIR controller configuration tool lies in the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

Webservice API Endpoint Disclosure Protected Information

The vulnerability of the Webservice API Endpoint component of the SAP Commerce Cloud platform is related to the transmission of data in an open manner. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

SIMATIC Reader Information Disclosure

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

HDF5 H5E_printf_stack() Disclosure

The vulnerability of the H5Eprintfstack function in the H5Eint.c file of the HDF5 library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this function...

Linux kernel dbgfs Target Disclosure

The vulnerability of the dbgfstargetidswrite function in the dbgfs component of the Linux operating system’s kernel is related to the issue of targetids being written multiple times without the monitoring and termination of DAMON. The number of references does not decrease, and memory for the...

PowerPanel Enterprise MCUDBHelper Disclosure

The vulnerability of the querycontractresult function in the MCUDBHelper component of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow...

iOS macOS tvOS visionOS watchOS Disclosure

The vulnerability of the kernel of iOS, macOS Sonoma, iPadOS, tvOS, visionOS, and watchOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these systems...

WP Sessions Time Monitoring Plugin Protected Information Disclosure

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system’s plugin is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose the protected information...