The vulnerability of the ABB eSOMS software for managing production processes, related to errors in processing requests, allows a perpetrator to disclose protected information.

The vulnerability of the ABB eSOMS software for managing production processes is related to errors in processing requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the system...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in improper authorization, which allows attackers to disclose protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2023-2907 · Hitachi Vantara · Hitachi Vantara Pentaho Business Analytics Server

Name of the Vulnerable Software and Affected Versions: Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x Description: The issue is related to improper authorization in the Hitachi Vantara Pentaho Business Analytics Server. Exploitation of this...

The vulnerability of the application development environment for ISaGRAF programmable logic controllers allows a hacker to disclose protected information.

The vulnerability of the application development environment for ISaGRAF programmable logic controllers is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server packages allows a perpetrator to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the Windows NFS Portmapper component on Windows operating systems, which allows a hacker to disclose sensitive information

The vulnerability of the Windows NFS Portmapper component in operating systems involves a lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

SUSE CVE-2001-1013

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publichtml directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server...

SUSE CVE-2005-3804

Cisco IP Phone VoIP 7920 1.08 listens to UDP port 17185 to support a VxWorks debugger, which allows remote attackers to obtain sensitive information and cause a denial of service...

The vulnerability of the Hotspot component of Oracle’s software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to disclose protected information.

The vulnerability of the Hotspot component of Oracle’s software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

VulnCheck KEV: CVE-2016-3427

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and...

okhttp: information disclosure via improperly used cryptographic function

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

okhttp: information disclosure via improperly used cryptographic function

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Produc...

The vulnerability of the Web Server component of the Oracle BI Publisher software, which is used for creating reports, allows a hacker to disclose protected information.

The vulnerability of the Web Server component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through HTTP requests...

The vulnerability of the Forms component in the Oracle Clinical Remote Data Capture system allows a intruder to disclose protected information.

The vulnerability of the Forms component in the Oracle Clinical Remote Data Capture system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the DNS Server component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that should be protected...

The vulnerability of D-Link DIR-882 wireless router’s microprogramming software allows a hacker to disclose protected information.

The vulnerability of the Syslog component in D-Link DIR-882 wireless routers relates to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

PT-2023-5839 · Triangle Microworks · Scada Data Gateway

Name of the Vulnerable Software and Affected Versions: Triangle MicroWorks SCADA Data Gateway affected versions not specified Description: The issue is related to the disclosure of information in the SCADA Data Gateway system. It allows remote attackers to disclose sensitive information on affect...

CVE-2023-1858

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the attack remotely. The...

PT-2023-17289 · Sourcecodester · Earnings/Expense Tracker App

Name of the Vulnerable Software and Affected Versions: SourceCodester Earnings and Expense Tracker App version 1.0 Description: A problematic issue was found in the software, affecting an unknown part of the file index.php. The manipulation of the page argument leads to information disclosure. It...

PT-2023-3088 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to improper access control in the teampass password manager, which can be exploited by a remote attacker to disclose protected information. Recommendations: For versions prior...