694 matches found
PT-2023-28264 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...
CVE-2023-41747
Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...
Acronis Agent 安全漏洞
Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from the disclosure of sensitive information due to unauthorized...
Lavalite CMS Security Vulnerability
Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...
Lavalite CMS Security Vulnerability
Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...
Video Conferencing with Zoom < 4.3.0 - Sensitive Data Disclosure
Description The plugin hardcodes its encryption key, which could allow unauthenticated attackers to decrypt the meeting id and password via the vczapiencryptdecrypt function...
Dell EMC PowerStore 日志信息泄露漏洞
Dell EMC PowerStore is a storage device from Dell USA. A log information disclosure vulnerability exists in Dell EMC PowerStore versions prior to 3.5.0.1, which originates from the insertion of sensitive information into a log file, and can be exploited by a malicious, high-privileged user to cau...
The vulnerability of the seg6genl_sethmac function in the Linux operating system allows a hacker to disclose sensitive information that is protected by this function.
The vulnerability of the seg6genlsethmac function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2023-29315 [FG-VD-23-008] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VI Notification
Adobe InDesign versions ID18.3 and earlier and ID17.4.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
GHSA-JM79-9PM4-VRW9 Decidim vulnerable to sensitive data disclosure
Note: added the actual report as a comment. Summary Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default, this library allows filtering on all data attributes and associations...
CVE-2023-34090
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
Design/Logic Flaw
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090 Decidim vulnerable to sensitive data disclosure
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090 Decidim vulnerable to sensitive data disclosure
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090
Summary: Decidim prior to 0.27.3 is affected by a data disclosure issue due to the Ransack filtering default behavior allowing all data attributes/associations to be queried, enabling an unauthenticated remote attacker to exfiltrate non-public data from the underlying database. Root cause: Miscon...
PT-2023-24663 · Ransack +2 · Ransack +2
Name of the Vulnerable Software and Affected Versions: Decidim versions prior to 0.27.3 Description: Decidim, a participatory democracy framework written in Ruby on Rails, uses a third-party library named Ransack for filtering certain database collections. By default, this library allows filterin...
Decidim vulnerable to sensitive data disclosure
Note: added the actual report as a comment. Summary Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default, this library allows filtering on all data attributes and associations...
CVE-2023-36539
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information...
CVE-2023-32402
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information...