7044 matches found
CVE-2022-46738
CVE-2022-46738 affects Dataprobe iBoot-PDU FW prior to 1.43.03312023. The vulnerability is categorized as an OS command/credential issue tied to weak credentials that enables an attacker to use SNMP to retrieve the device MAC address and log in as the administrator, exposing sensitive information...
CVE-2022-46738 CVE-2022-46738
The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login as admin...
PT-2023-21700 · Snap One · Snap One Ovrc
Name of the Vulnerable Software and Affected Versions: Snap One OvrC affected versions not specified Description: The issue allows an attacker to enumerate device MAC addresses and obtain information about the devices from the Snap One OvrC cloud servers. When a random MAC address is provided, th...
WordPress EventPrime Plugin <= 2.8.6 is vulnerable to Sensitive Data Exposure
Software EventPrime Type Plugin Vulnerable versions = 2.8.6 Fixed in 3.0.0 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-33321 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 71ae7af08f1a Credits yuyudhn Required privilege...
Dataprobe iBoot-PDU 安全漏洞
The Dataprobe iBoot-PDU is a web-accessible managed PDU independently controlled outlet from Dataprobe USA. A security vulnerability exists in Dataprobe iBoot-PDU FW prior to version 1.42.06162022, which stems from the product exposing multiple sensitive data fields, and can be exploited by an...
CVE-2023-28045
Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with low privileges could potentially exploit this vulnerability, leading to gain access to unauthorized data...
CVE-2023-2025
OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances...
Apple macOS Ventura 缓冲区错误漏洞
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. Apple macOS Ventura version 13.4 suffers from a buffer error vulnerability that stems from an application that may be able to disclose sensitive kernel state...
Johnson Controls OpenBlue Enterprise Manager Data Collector 安全漏洞
The Johnson Controls OpenBlue Enterprise Manager Data Collector is an industrial PC from Johnson Controls that provides connectivity to instrumentation and building automation systems to extract data from EM applications. A security vulnerability exists in Johnson Controls OpenBlue Enterprise...
CVE-2023-28319
A use-after-free flaw was found in the Curl package. This flaw risks inserting sensitive heap-based data into the error message that users might see or is otherwise leaked and revealed...
PT-2023-24013 · Symcon · Ip-Symcon
Name of the Vulnerable Software and Affected Versions: Symcon IP-Symcon versions prior to 6.3 Description: The web interface of Symcon IP-Symcon allows a remote attacker to read sensitive files via .. directory-traversal sequences in the URL. This issue enables unauthorized access to sensitive...
ABB Terra AC wallbox 安全漏洞
The ABB Terra AC wallbox is ABB's superior EV home charger, offering high value quality, future-proof flexibility, and advanced security and protection. A security vulnerability exists in the ABB Terra AC wallbox, which results from the transmission of sensitive information in clear text. The...
CVE-2023-32982
Jenkins Ansible Plugin 204.v8191fd551ebf and earlier stores extra variables unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...
WordPress AnyWhere Elementor Plugin < 1.2.8 is vulnerable to Sensitive Data Exposure
Software AnyWhere Elementor Type Plugin Vulnerable versions 1.2.8 Fixed in 1.2.8 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0443 Patch priority Low CVSS severity Low 5 Developer WPVibes PSID 5959639f04b8 Credits Sanjay Das Required privilege...
VulnCheck KEV: CVE-2022-45354
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60...
WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Sensitive Data Exposure
Software Community by PeepSo Type Plugin Vulnerable versions = 6.0.9.0 Fixed in 6.1.0.0 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-27630 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 51cd63709c31 Credits Dave Jong Patchstac...
PT-2023-20013 · Unknown · Virtualreception Digital Receptie
Name of the Vulnerable Software and Affected Versions: virtualreception Digital Receptie version win7sp1 rtm.101119-1850 6.1.7601.1.0.65792 Description: The issue allows an attacker to gain sensitive information via a crafted GET request to the embedded web server, exploiting a Directory Traversa...
Weblate: Logging in without knowing credentials after logged out action
A vulnerability was discovered where a user could remain logged in to a website even after logging out, and the next person who accesses the site could be automatically logged in as the previous user without needing their credentials. This could potentially lead to sensitive data exposure and...
CVE-2022-30995
Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...
