Lucene search
+L

1607 matches found

Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.7 views

PT-2022-26385 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.6 views

PT-2022-26393 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

5.5CVSS6.9AI score0.00357EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.8 views

The vulnerability of the pre-processing processor Simcenter Femap, caused by overflow in dynamic memory buffers, allows a hacker to disclose protected information.

The vulnerability of the pre-processing processor Simcenter Femap arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information as a result of analyzing specially created .NEU files...

7.1CVSS6.7AI score0.00846EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.8 views

The vulnerability of the Visual Difference Application component of the SAP Business Objects Business Intelligence Platform allows a perpetrator to disclose protected information.

The vulnerability of the Visual Difference Application component in the SAP Business Objects Business Intelligence Platform exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow a malicious actor, operating remotely,...

4.9CVSS5.5AI score0.00429EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/09/14 5:15 p.m.5 views

CVE-2021-38924

IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163...

7.5CVSS5.8AI score0.00856EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/09/14 12:0 a.m.9 views

PT-2022-7401 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.3 Description: The issue concerns the exposure of private information defined in the setup of GLPI, such as smtp or cas hosts, to unauthorized individuals. This exposure can be exploited remotely, allowing attacker...

10CVSS6.3AI score0.99696EPSS
SaveExploits41References205
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.9 views

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

3.1CVSS6.7AI score0.00515EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.10 views

The vulnerability of the Content Security Policy implementation in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Content Security Policy mechanism implemented in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5CVSS6.8AI score0.00876EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.7 views

The vulnerability of the Pointer Lock component in Microsoft Edge and Google Chrome browsers allows attackers to disclose sensitive information.

The vulnerability of the Pointer Lock component in Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

9.4CVSS5.8AI score0.00522EPSS
SaveExploits0References8Affected Software5
OSV
OSV
added 2022/08/31 4:15 p.m.4 views

CVE-2022-26330

Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Information Disclosure, or Self Cross-Site Scripting XSS. This issue affects: Micro Focus ArcSight Logger versions prior to v7.2.2 version and prior versions...

7.5CVSS5.8AI score0.0057EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.6 views

PT-2022-23950 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.0073EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.7 views

PT-2022-23952 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

5.5CVSS7AI score0.0073EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.6 views

PT-2022-23947 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

5.5CVSS6.9AI score0.0073EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:0 a.m.10 views

The vulnerability of the monitoring tool for the virtual infrastructure vRealize Operations lies in insufficient validation of incoming requests, allowing a perpetrator to disclose sensitive information.

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

4CVSS5.3AI score0.00588EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/18 12:0 a.m.5 views

PT-2022-23776 · Flir · Flir Ax8

Name of the Vulnerable Software and Affected Versions: FLIR AX8 thermal sensor cameras version up to and including 1.46.16 Description: The issue is related to Directory Traversal due to improper access restriction. An unauthenticated, remote attacker can exploit this by sending a URI that contai...

7.5CVSS7.3AI score0.15195EPSS
SaveExploits4References6
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.8 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to the disclosure of information in the erroneous data area, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

6.8CVSS7.7AI score0.01341EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/16 12:0 a.m.9 views

The vulnerability of the Linux operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

3.5CVSS6.5AI score0.00475EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2022/08/12 3:15 p.m.25 views

CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

6.5CVSS0.00225EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.5 views

CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

6.5CVSS7AI score0.00225EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/12 3:15 p.m.20 views

Heap overflow

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

3.3CVSS6.6AI score0.00225EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder