PT-2022-25089 · Contacts · Contacts

Name of the Vulnerable Software and Affected Versions: Contacts versions prior to SMR Dec-2022 Release 1 Description: The issue allows access to sensitive information via implicit intent due to improper access control. Recommendations: For versions prior to SMR Dec-2022 Release 1, update to SMR...

PT-2022-17832 · Horner Automation · Rcc 972

Name of the Vulnerable Software and Affected Versions: Horner Automation’s RCC 972 firmware version 15.40 Description: The issue concerns the presence of global variables in the firmware, which could allow an attacker to read out sensitive values and variable keys from the device. Recommendations...

The vulnerability of the implementation of the salt.wheel.pillar_roots.write method in the configuration management system and remote execution of SaltStack Salt operations allows a perpetrator to disclose sensitive information.

The vulnerability of the salt.wheel.pillarroots.write method in the configuration management system and remote execution of SaltStack Salt is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to expose...

CVE-2022-2721

In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled...

Mitsubishi Electric GX Works3 安全漏洞

Mitsubishi Electric GX Works3 is the latest generation of programming and maintenance software from Mitsubishi Electric Corporation Mitsubishi Electric, Japan, designed specifically for the MELSEC iQ-R and MELSEC iQ-F series control systems. A security vulnerability exists in Mitsubishi Electric ...

WordPress miniOrange Two-Factor Authentication plugin <= 5.6.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Calvin Alkan in WordPress miniOrange Two-Factor Authentication plugin versions = 5.6.1. Solution Update the WordPress miniOrange's Google Authenticator plugin to the latest available version at least 5.6.2...

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

CVE-2022-41655

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

CVE-2022-41655

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

CVE-2022-41655 WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability

Auth. subscriber+ Sensitive Data Exposure vulnerability in Phone Orders for WooCommerce plugin = 3.7.1 on WordPress...

CVE-2022-41655

CVE-2022-41655 affects the WordPress plugin Phone Orders for WooCommerce (versions ≤ 3.7.1). The root issue is a sensitive data exposure that is accessible to authenticated users with subscriber-level privileges (and higher). Documented impact is exposure of Auth. (subscriber+) data. The vulnerab...

PT-2022-26008 · WordPress · Phone Orders For Woocommerce

Name of the Vulnerable Software and Affected Versions: Phone Orders for WooCommerce plugin version 3.7.1 and earlier Description: The issue concerns a Sensitive Data Exposure vulnerability in the Phone Orders for WooCommerce plugin for WordPress, affecting authenticated users with subscriber or...

PT-2022-6351 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially explo...

IBM CICS TX 加密问题漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. IBM CICS TX version 11.1 is vulnerable to an encryption issue that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt...

IBM CICS TX 加密问题漏洞

IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. IBM CICS TX version 11.7 is vulnerable to an encryption issue that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decrypt...

PT-2022-25532 · Zoho · Zoho Manageengine Servicedesk Plus +1

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ServiceDesk Plus MSP versions prior to 10609 Zoho ManageEngine SupportCenter Plus versions prior to 11025 Description: The issue allows users to obtain sensitive data during an export of requests from the list view, due to a...

AIPHONE GT-DB-VN和AIPHONE GT-DMB 安全漏洞

AIPHONE GT-DB-VN and AIPHONE GT-DMB are both products of AIPHONE CORPORATION Japan.AIPHONE GT-DB-VN is an audio module with NFC reader. For use with the GT Series Multi-Tenant Security Intercom, a multi-tenant video entry system.AIPHONE GT-DMB is a 3-in-1 video entry station with NFC reader for t...

OESA-2022-2029 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce,and...

CVE-2022-20953

Cisco TelePresence CE and RoomOS Software are affected by multiple local, authenticated vulnerabilities leading to path traversal, sensitive data disclosure, and arbitrary file writes. Exploitation routes include excessive privileges for system commands (viewing keystrokes via USB, etc.) and syml...

Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the...