PT-2024-15776 · Byzoro · Byzoro Smart S150 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S150 Management Platform version V31R02B15 Description: A vulnerability has been found in the Byzoro Smart S150 Management Platform, affecting an unknown part of the file /log/download.php of the component Backup File Handler. Th...

The vulnerability of the Windows Message Queuing system, which allows a perpetrator to disclose protected information

The vulnerability of Windows’ Message Queuing service stems from deficiencies in the access control mechanism. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the SAP GUI connector’s user interface for Microsoft Edge involves unauthorized access to system data within the controlled area, allowing attackers to disclose protected information.

The vulnerability of the SAP GUI connector’s user interface for Microsoft Edge relates to the disclosure of system data within the controlled area by unauthorized parties. Exploiting this vulnerability can allow attackers to disclose protected information remotely...

The vulnerability of the catalog-import function of the online software development platform Red Hat Developer Hub allows a hacker to disclose protected information.

The vulnerability of the catalog-import function on the online software development platform Red Hat Developer Hub is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

PT-2024-1146 · Microsoft · Windows Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing affected versions not specified Description: The issue is related to weaknesses in the access control mechanism of the Windows Message Queuing system, which can be exploited by a remote attacker to disclose protected...

PT-2024-1126 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Local Security Authority Subsystem Service LSASS of the Windows operating...

PT-2024-1148 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol in Windows operating systems, specifically due to shortcomings in the access control mechanism. This allows a remote attack...

PT-2024-1086 · Sap · Sap Gui Connector For Microsoft Edge

Name of the Vulnerable Software and Affected Versions: SAP GUI connector for Microsoft Edge version 1.0 Description: The issue allows an attacker to access highly sensitive information that would otherwise be restricted, causing a high impact on confidentiality. This is related to the disclosure ...

The vulnerability of the DHCP server service in the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

VulnCheck KEV: CVE-2017-10974

Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on...

The vulnerability of the Go programming language’s filepath package, which allows attackers to disclose protected information

The vulnerability of the Go programming language’s filepath package is related to incorrect restrictions on the path name for restricted access directories. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

PT-2023-31848 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2023-31850 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...

PT-2023-31854 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to disclose protected information.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of ASUS RT-AC66U router’s microprogramming software, related to the transmission of credentials in an unencrypted form, allows a hacker to disclose the protected information.

The vulnerability of ASUS RT-AC66U router’s microprogramming software is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

PT-2023-30817 · Google · Android

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in the Init of protocolcalladapter.cpp. This could lead to remote information disclosure with System...

PT-2023-30823 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the sms DecodeCodedTpMsg function of sms PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote...