CVE-2019-9237

CVE-2019-9237 describes a Bluetooth out-of-bounds read in Android 10 due to a missing bounds check, enabling potential remote information disclosure. Exploitation requires user interaction, and the issue does not require elevated privileges beyond what the user already has. Affected product is An...

The vulnerability of the WebSocket component in Firefox browsers, which allows attackers to disclose protected information

The vulnerability of the WebSocket component in Firefox arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this mechanism...

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows attackers to disclose protected information.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of Microsoft Lync Server’s messaging server, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Lync Server’s messaging server is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the FortiOS operating system, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the FortiOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

CVE-2019-11064

A vulnerability of remote credential disclosure was discovered in Advan VD-1 firmware versions up to 230. An attacker can export system configuration which is not encrypted to get the administrator’s account and password in plain text via cgibin/ExportSettings.cgi?Export=1 without any...

CVE-2019-2129

In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

Adobe Acrobat and Reader Out-of-Bounds Write (APSB19-41: CVE-2019-8027)

An out of bounds write vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

CVE-2019-5407

A remote information disclosure vulnerability was discovered in HPE 3PAR StoreServ Management and Core Software Media versions: prior to 3.5.0.1...

The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, and Kaspersky Small Office Security lies in the lack of protection for operational data, allowing attackers to exploit this weakness to compromise the protected information.

The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, and Kaspersky Small Office Security lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to...

The vulnerability of the net_hash_mix() function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the nethashmix function in the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

CVE-2019-11991

HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...

CVE-2019-2116

In saveattrseq of sdpdiscovery.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0...

The vulnerability of the Remote Logging component of the McAfee Agent antivirus software allows a hacker to disclose protected information.

The vulnerability of the Remote Logging component of the McAfee Agent antivirus software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

CVE-2018-11421

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to...

CVE-2018-11421

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...