The vulnerability of the Shortcuts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Shortcuts component in iOS, macOS, and iPadOS systems is related to permission handling errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...

PT-2024-1827 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Edge, which could allow a remote attacker to disclose protected information...

PT-2024-1825 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Microsoft Edge, which could allow a remote attacker to disclose protected information...

HPESBMU04599 rev.1 - HPE IceWall products, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE IceWall Federation - 4.0 RHEL 8 and Windows - SAML IdP, Office 365 module, OIDC RP and OIDC OP. IceWall Gen11 Password Reset Option - 11.0 RHEL 8 and Windows IceWall...

CVE-2024-0040

In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40104

In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the unencrypted storage of critical information, which allows attackers to disclose protected data.

The vulnerability of the XWiki Platform lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow a malicious actor to disclose the protected data remotely...

PT-2024-2580 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.5.0.x Description: The issue is related to the use of a broken cryptographic algorithm, which could be exploited by a remote unauthenticated attacker to disclose protected information...

PT-2024-14528 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this issue. The specific flaw exists...

PT-2024-19472 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. Although authentication is required to exploit this issue, the product implementation is...

The vulnerability of the Compiler component in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition allows attackers to disclose protected information.

The vulnerability of the Compiler component in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2023-47148

IBM Storage Protect Plus Server 10.1.0 through 10.1.15.2 Admin Console could allow a remote attacker to obtain sensitive information due to improper validation of unsecured endpoints which could be used in further attacks against the system. IBM X-Force ID: 270599...

CVE-2024-24388

Cross-site scripting XSS vulnerability in XunRuiCMS versions v4.6.2 and before, allows remote attackers to obtain sensitive information via crafted malicious requests to the background login...

The vulnerability of the security user interface (Security UI) of Microsoft Edge and Google Chrome browsers allows a perpetrator to disclose protected information.

The vulnerability of the Security UI of Microsoft Edge and Google Chrome browsers is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the /cgi-bin/cstecgi.cgi file, a microprogramming software for the Totolink N200RE router, allows a hacker to disclose protected information.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the Totolink N200RE router’s microprogramming system is related to an incorrect session duration. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

UBUNTU-CVE-2023-39197

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking conntrack in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol...

CVE-2023-39197 Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()

An out-of-bounds read vulnerability was found in Netfilter Connection Tracking conntrack in the Linux kernel. This flaw allows a remote user to disclose sensitive information via the DCCP protocol...

CVE-2023-39197

The CVE-2023-39197 entry concerns an out-of-bounds read in Linux kernel Netfilter Connection Tracking (conntrack) for DCCP. A remote attacker could disclose kernel memory contents via crafted DCCP traffic due to copying an unbounded portion of the conntrack header; the issue is categorized as a k...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data, allowing attackers to disclose protected information.

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Pod Admin component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to disclose protected information.

The vulnerability of the Pod Admin component of the Oracle Business Intelligence Enterprise Edition software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected b...