PT-2024-39776 · Posthog · Posthog

Name of the Vulnerable Software and Affected Versions: PostHog affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this issue. The specific flaw exists within...

PT-2024-33206 · Unknown · Com.Wisdomcity.Zwave

Name of the Vulnerable Software and Affected Versions: com.wisdomcity.zwave version 1.1.0 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 1.1.0, at the moment, there is no information about a newer versi...

PT-2024-39823 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...

PT-2024-39813 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious...

PT-2024-33210 · Fermax · Com.Fermax.Vida

Name of the Vulnerable Software and Affected Versions: com.fermax.vida version 2.4.6 Description: The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations: For version 2.4.6, update to a newer version that contains a fix for this issue,...

The vulnerability of Microsoft Edge browser, related to errors in the use of standard permissions, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to errors in the use of standard permissions. Exploiting this vulnerability can allow a perpetrator to remotely disclose protected information...

The vulnerability of the implementation of the Global Search technology in the software platform based on git for collaborative code development on GitLab allows a perpetrator to disclose protected information.

The vulnerability of the Git-based software platform’s implementation of the Global Search technology for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose...

The vulnerability of the Microsoft Outlook email client for iOS, related to improper authentication, allows a hacker to disclose protected information.

The vulnerability of the Microsoft Outlook email client for iOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

CVE-2024-20102

In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998892; Issue ID: MSV-1601...

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data software in managing business processes lies in the transfer of critical information in open text format, allowing attackers to disclose protected information.

The vulnerability of IBM Cognos Dashboards on Cloud Pak for Data, related to the transmission of critical information in open text format. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the cfGetPrinterAttributes5 function in the libcupsfilters library of the CUPS printing server allows a attacker to disclose protected information.

The vulnerability of the cfGetPrinterAttributes5 function in the libcupsfilters library of the CUPS printing server is related to the lack of measures taken to neutralize special elements used in OS commands. Exploiting this vulnerability may allow a malicious actor to disclose protected...

PT-2025-4093 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the targ...

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems arises from insufficient validation of input data, allowing attackers to disclose sensitive information.

The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to disclose sensitive information remotely...

PT-2024-22088 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15 Description: The issue is related to improved memory handling, allowing an application to potentially read restricted memory. This is a result of a memory corruption flaw. The estimated impact of this issue ...

PT-2024-7377 · Unknown · Edonline Ems

Name of the Vulnerable Software and Affected Versions: EdOnline EMS affected versions not specified Description: The issue is related to the lack of data cleaning and validation in the Login field of the authentication window, which can be exploited by a remote attacker to disclose protected...

PT-2024-6305 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to disclose...

PT-2024-6472 · Veeam · Veeam Reporter Service +1

Name of the Vulnerable Software and Affected Versions: Veeam Reporter Service affected versions not specified Description: A vulnerability exists in Veeam Reporter Service that allows an attacker to access the NTLM hash of the service account. This attack requires user interaction and data...

PT-2024-5942 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 7.0.X through 7.0.50 OTRS version 8.0.X OTRS version 2023.X OTRS versions 2024.X through 2024.5.X OTRS Community Edition version 6.0.x Description: The issue is related to the OTRS admin log module, where passwords of agents and...

CVE-2023-47728

IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks again...

CVE-2024-34727

In sdpucompareuuidwithattr of sdputils.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...