Design/Logic Flaw

In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033...

CVE-2018-9526

CVE-2018-9526 is a Framework information-disclosure issue affecting Android 7.0–9.x (patch levels 2019-06-01/2019-06-05). The root cause is an improperly configured setting in device configuration data that could allow remote disclosure of the device location without user interaction. The Android...

CVE-2018-9526

In device configuration data, there is an improperly configured setting. This could lead to remote disclosure of device location. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-112159033...

CVE-2018-9358

In gattsprocessattributereq of gattsc.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth process with no additional execution privileges needed. User interaction is not needed for exploitation. Produc...

The vulnerability in the FortiOS operating system’s web portal allows a hacker to expose user credentials.

The vulnerability of the FortiOS operating system’s web portal relates to the storage of user credentials in an exposed manner. Exploiting this vulnerability allows a malicious actor to disclose user credentials remotely...

UBUNTU-CVE-2018-15750

Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server...

Information disclosure

An attacker with remote access to the SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B web interface can disclose information about the camera including camera hardware, wireless network, and local area network information...

The vulnerability in the implementation of the Microsoft Server Message Block 2.0 network protocol on Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Microsoft Server Message Block 2.0 SMBv2 network protocol in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information with the help of speciall...

Race condition

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework SGF version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler...

CVE-2018-7110

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework SGF version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler...

Foxit Reader and Foxit PhantomPDF for Windows Out-of-Bounds Read Vulnerability (CNVD-2018-25191)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in Foxit Reader 9.2.0.9297 and earlier versions and Foxit PhantomPDF 9.2.0.9297 and...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2018-26557)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader in the existence of out-of-bounds read vulnerability. Remote...

IBM Spectrum Symphony and Platform Symphony XML External Entity Injection Vulnerability

IBM Spectrum Symphony and Platform Symphony are both products of IBM Corporation in the U.S. IBM Spectrum Symphony is a suite of enterprise-class management software for running compute- and data-intensive distributed applications on shared grids.Platform Symphony is a set of SOA-based architectu...

Foxit Reader for Windows Buffer Overflow Vulnerability

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. An out-of-bounds read vulnerability exists in the handling of the Calculate event in Foxit Reader 9.2.0.9297 and earlier versions for Windows platforms, where the program fails ...

CVE-2018-9505

In mcaccbhdlreq of mcacact.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions:...

The vulnerability of the Fetch API interface of Microsoft Edge browser allows a perpetrator to disclose protected information.

The vulnerability of the Fetch API interface of Microsoft Edge is related to errors in processing filtered responses. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2018-7070

HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7070

HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7070

The CVE-2018-7070 entry affects HPE CentralView Fraud Risk Management (older than CV 6.1). Root cause: remote information disclosure vulnerability. Impact: partial confidentiality loss via remote access vectors; no integrity/availability impact stated. Affected product versions: pre-6.1 CV; fixed...

Foxit Reader Buffer Overflow Vulnerability (CNVD-2018-14093)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. An out-of-bounds reading vulnerability exists in the handling of PDF documents in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to...