The vulnerability of the PostgreSQL database management system lies in the lack of protection for operational data, which allows attackers to disclose sensitive information that should be protected.

The vulnerability of the PostgreSQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the auth-gss2.c file in the OpenSSH cryptographic protection mechanism is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

CVE-2017-5871

Odoo Version = 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive information remote...

The vulnerability in the web interface of the Cisco Application Policy Infrastructure Controller allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor to gain access to protected data remotely...

SOCA Access Control System 180612 SQL Injection

SOCA Access Control System 180612 SQL Injection And Authentication Bypass Vendor: SOCA Technology Co., Ltd Product web page: http://www.socatech.com Affected version: 180612, 170000 and 141007 Summary: The company's products include proximity and fingerprint access control system, time and...

SOCA Access Control System 180612 SQL Injection And Authentication Bypass

Summary The company's products include proximity and fingerprint access control system, time and attendance, electric locks, card reader and writer, keyless entry system and other 30 specialized products. All products are attractively designed with advanced technology in accordance with users'...

CVE-2019-2051

In heap of spaces.h, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure when processing a proxy auto config file with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

Vulnerability of the Server sub-component: The Pluggable Auth component of the MySQL Server database management system, which allows attackers to disclose sensitive information.

The vulnerability of the MySQL Server component, the Pluggable Auth system for database management, is related to deficiencies in protecting confidential information. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

PT-2019-18313 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.3.0.10826 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...

PT-2019-18333 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.4.1.16828 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...

PT-2019-18330 · Foxit · Foxit Reader

Name of the Vulnerable Software and Affected Versions: Foxit Reader version 9.4.1.16828 Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the Cisco Smart Call Home component for Cisco IOS XE and Cisco IOS operating systems allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Cisco Smart Call Home component for Cisco IOS XE and Cisco IOS exists due to insufficient verification of certificate authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of browsers Internet Explorer and Microsoft Edge, related to insecure management of privileges, allows attackers to disclose protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

ArcSight Logger Directory Traversal Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A path traversal vulnerability exists in Micro Focus ArcSight...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the TFTP file transfer protocol implementation in Cisco IOS XR allows a hacker to disclose sensitive information.

The vulnerability of the TFTP file transfer protocol implementation in Cisco IOS XR operating systems is related to security flaws in the mechanisms used for protection. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the vout function in the software tool for interacting with curl servers allows a hacker to disclose sensitive information and cause service failures.

The vulnerability of the vout function in the toolmsgstr.c file of the software for interacting with curl servers relates to reading beyond the buffer boundaries when the buffer is overflowing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...