Design/Logic Flaw

A Remote Disclosure of Information vulnerability in HPE Cloud Optimizer version v3.0x was found...

CVE-2017-5785

A remote information disclosure vulnerability is present in HPE Matrix Operating Environment Software version 7.6 (and SIM Software version 7.6 per CNVD). The issue could allow a remote attacker to obtain sensitive information. No root-cause or exploit details are provided in the connected docume...

CVE-2017-5803

A Remote Disclosure of Information vulnerability in HPE NonStop Servers using SSH Service version L series: T0801L02 through T0801L02^ABX; J and H series: T0801H01 through T0801H01^ACA was found...

CVE-2017-8944

The CVE-2017-8944 entry relates to Hewlett Packard Enterprise Cloud Optimizer v3.0x and is substantiated by multiple sources including ZDI-17-365. The issue is a Remote Disclosure of Information caused by missing validation in the DownloadServlet, allowing an attacker to disclose sensitive files....

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

CVE-2016-8525

CVE-2016-8525 is a Remote Disclosure of Information vulnerability in Hewlett Packard Enterprise (HPE) iMC PLAT. Affected: iMC PLAT versions v7.2 E0403P06 and earlier. Impact: confidentiality partial (per CVSS v2) and high (per CVSS v3); no integrity or availability impact stated. Root cause detai...

CVE-2017-8980

CVE-2017-8980 affects HPE Intelligent Management Center (iMC) PLAT 7.3 E0504P2. The connected ZDI advisory specifies an information-disclosure flaw in the operatorOnlineList_contentOnly.jsf endpoint (default ports 8080/8443) that can expose session tokens; authentication may be bypassed, enabling...

CVE-2017-12543

CVE-2017-12543 is a remote information-disclosure vulnerability affecting multiple HP products: Moonshot Remote Console Administrator (before 2.50), iLO4 (before 2.53), iLO3 (before 1.89), and iLO2 (before 2.30). The provided documents describe an information disclosure issue but do not specify t...

CVE-2017-8980

A Remote Disclosure of Information vulnerability in HPE Intelligent Management Center iMC PLAT version 7.3 E0504P2 was found...

CVE-2017-5803

CVE-2017-5803 describes a remote information disclosure in HPE NonStop Servers via the SSH service. Affected products are HPE NonStop Server SSH on L-series (T0801L02 through T0801L02^ABX) and J/H-series (T0801H01 through T0801H01^ACA). The vulnerability enables an attacker with network access (n...

LibreOffice < 6.0.1 - '=WEBSERVICE' Remote Arbitrary File Disclosure

Vulnerability description CVE-2018-6871 First part LibreOffice supports COM.MICROSOFT.WEBSERVICE function: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 The function is required to obtain data by URL, usually used as:...

The vulnerability of the Media Framework component of the Android operating system, which allows for the disclosure of protected information

The vulnerability of the Media Framework component decoder/impeg2ddechdr.c in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

UBUNTU-CVE-2016-3952

web2py before 2.14.1, when using the standalone version, allows remote attackers to obtain environment variable values via a direct request to examples/templateexamples/beautify. NOTE: this issue can be leveraged by remote attackers to gain administrative access...

CVE-2017-16607

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within heapdumps.jsp. The issue results from the lack of proper validation...

CVE-2017-16609

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within download.jsp. The issue results from the lack of proper validation ...

CVE-2017-16596

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16596

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

CVE-2017-16592

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...

UBUNTU-CVE-2018-0486

Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service Provider before 2.6.0 on Windows and other products, mishandles digital signatures of user attribute data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via a crafted DTD...

HPSBPI03574 rev. 2 - WPA, WPA2 Key Reinstallation Attacks (KRACK attacks) Potential Remote Disclosure of Information: Certain HP Enterprise Printer and MFP products, Certain HP PageWide Printer and MFP Products, HP Jetdirect Accessory Products

Potential Security Impact Remote disclosure of information. Source:Mathy Vanhoef of imec-DistriNet, KU Leuven VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP Printers and MFPs, and HP JetDirect Networking accessories using WPA or WPA2. This vulnerabili...