PRIMX Zed Security Vulnerability

Primx PRIMX Zed is a suite of sensitive data encryption software from the French company Primx. A security vulnerability exists in PRIMX Zed that stems from the presence of a sensitive information disclosure vulnerability. Affected products and versions: ZED Enterprise for Windows version Q.2020....

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1 that stems from vulnerability to disclosure of sensitive information to unauthorized actors...

The vulnerability of the handleFileRequest function in the src/main/java/com/feihong/ldap/HTTPServer.java file, a tool for exploiting vulnerabilities in Java Naming and Directory Interface (JNDI) via JNDIExploit, is related to a flaw in the pathname restriction mechanism. This vulnerability allows an attacker to disclose sensitive information that should be protected.

The vulnerability of the handleFileRequest function in src/main/java/com/feihong/ldap/HTTPServer.java of the JNDI exploitation tool is related to vulnerabilities in pathname restrictions. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS allows a hacker to disclose protected information.

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Profile Extra Fields by BestWebSoft < 1.2.8 - Unauthenticated Sensitive Data Disclosure

Description The plugin does not have authorisation in the prflxtrfldsexportfile function, allowing unauthenticated users to retrieve sensitive data such as the ones entered in custom fields...

CVE-2023-45247

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36497, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

PT-2023-5796 · Acronis · Acronis Cyber Protect 16 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions prior to build 31637 Acronis Cyber Protect 16 versions prior to build 37391 Acronis Agent versions prior to the specified build Description: The issue is related to errors in authorization, which can...

PT-2023-14390 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 11.5 Description: The issue could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. Recommendations: For IBM Security Guardium version 11.5, consider updating...

CVE-2023-44205

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

CVE-2023-44153

Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 Linux, macOS, Windows before build 35979...

Design/Logic Flaw

he vulnerability is that the Call management "com.android.server.telecom" app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers...

Design/Logic Flaw

The vulnerability is that the Call management "com.android.server.telecom" app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers,...

CVE-2023-44126

The CVE-2023-44126 issue concerns the Android Call management component (com.android.server.telecom) patched by LG. The vulnerability arises because LG’s patch sends a large number of LG-owned implicit broadcasts that disclose sensitive telephony data to all third-party apps on the same device. T...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...

Amazon Linux 2 : ansible (ALASANSIBLE2-2023-006)

The version of ansible installed on the remote host is prior to 2.9.12-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ANSIBLE2-2023-006 advisory. An Improper Output Neutralization for Logs flaw was found in Ansible when using the uri module, where sensitive da...

CVE-2022-3261

A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack overcloud update run, leading to a disclosure of sensitive information problem...

CVE-2023-4828

An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...

Input validation

An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...

CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...

PowerShield SNMP Web Pro Security Vulnerability

PowerShield SNMP Web Pro is a PowerShield for monitoring and managing multiple UPSs in a networked environment. A security vulnerability exists in PowerShield SNMP Web Pro version v.1.1 that originated from a vulnerability that allows a remote attacker to execute arbitrary code and obtain sensiti...