PT-2024-6875

Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.4.5 Description The issue is a path traversal affecting the Faces Mojarra component within Ivanti Avalanche. This allows a remote, unauthenticated attacker to potentially reveal sensitive information. The...

HPESBHF04634 rev.1 - HPE Compute Scale-up Server 3200 Server, Disclosure of Sensitive Information

Potential Security Impact: Remote: Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.10.342 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-22440 |...

The vulnerability of Zoom’s video conferencing software, related to insufficient validation of input data, allows attackers to disclose sensitive information that should be protected.

The vulnerability of Zoom video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems allows a intruder to disclose protected information.

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

The vulnerability of the Meeting Chat component of Zoom’s video conferencing software, which allows a intruder to disclose protected information

The vulnerability of the Zoom software’s meeting chat component relates to the improper processing of logical operations. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

CVE-2023-52533

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52533

The CVE-2023-52533 entry concerns the modem-ps-nas-ngmm component, where incorrect error handling may cause undefined behavior. This could enable remote information disclosure without additional privileges. Public sources (NVD/Red Hat/CVE records) state the impact as information disclosure with n...

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52342

In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-52342

The CVE-2023-52342 entry concerns the modem-ps-nas-ngmm component, where an undefined behavior due to incorrect error handling could allow remote information disclosure without additional execution privileges. Documents confirm the vulnerability impact is a confidentiality exposure (CVE described...

The vulnerability of the logging function of the Kibana data visualization service allows a perpetrator to disclose protected information.

The vulnerability of the logging function of the Kibana data visualization service is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the `pic_parameter_set::dump()` function in the h.265 Libde265 implementation allows a attacker to disclose protected information or cause service failures.

The vulnerability of the picparameterset::dump function in the h.265 Libde265 implementation is related to buffer overflows caused by the parameters numtilecolumns and numtilerow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...

CVE-2024-3160

Intelbras MHDX series (1004, 1008, 1016, 5016) and HDCVI 1008/1016 are reported to be affected by a vulnerability in the HTTP GET Request Handler, involving an unknown part of the file /cap.js. The flaw enables information disclosure and can be triggered remotely. Affected versions are up to 2024...

PT-2024-17001 · Devklan · Alma Blog

Name of the Vulnerable Software and Affected Versions: Devklan's Alma Blog versions 2.1.10 and earlier Description: The issue allows a remote user to retrieve all valid users registered in the application by analyzing the request response. This could lead to information disclosure. Recommendation...

The vulnerability of the web interface of the IBM Engineering Requirements Management DOORS software allows a hacker to disclose protected information.

The vulnerability of the IBM Engineering Requirements Management DOORS application’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

CVE-2024-27206

there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Grouptime Teamwire Client Security Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime, Germany. A security vulnerability exists in the Teamwire Windows desktop client versions v.2.0.1 through v.2.4.0. A remote attacker could exploit the vulnerability to obtain sensitive information via a special...

The vulnerability of microprogrammed network interface cards and Zyxel USG/ZXyel VPN devices lies in the lack of authentication for a critical function, allowing attackers to disclose protected information.

The vulnerability of microprogrammed network interface cards and Zyxel USG and Zyxel VPN devices lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

PT-2024-21836 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...