7044 matches found
CVE-2022-29090
Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform...
CVE-2022-29090
CVE-2022-29090 affects Dell Wyse Management Suite 3.6.1 and earlier, enabling a low-privileged user to obtain credentials via a sensitive data exposure vulnerability. Connected sources confirm the issue in Wyse Management Suite and note that Dell released fixes (e.g., 3.8+ via DSA-2022-134). Impa...
CVE-2022-36834
Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interaction...
USN-5549-1 python-django vulnerability
It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine...
CVE-2022-27614
Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors...
eventsource: Exposure of Sensitive Information
A flaw was found in the EventSource NPM Package. The description from the source states the following message: "Exposure of Sensitive Information to an Unauthorized Actor." This flaw allows an attacker to steal the user's credentials and then use the credentials to access the legitimate website...
CVE-2022-35288
IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818...
Information disclosure
IBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 230818...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 2.6.12-rc2 through 5.15-rc1, which originates from an attacker being able to force a read of an invalid memory address ...
CVE-2022-20860
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information. This vulnerability exists because SSL server certificates are not validated when Cisco Nexus...
The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges and expose protected information.
The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges and expose sensitive information...
Digital Watchdog DW MEGApix IP 信息泄露漏洞
Digital Watchdog DW MEGApix IP is a camera from Digital Watchdog. A security vulnerability exists in Digital Watchdog DW MEGApix IP version 4.2.0.32842, which stems from a vulnerability that allows an attacker to access sensitive information via a crafted API call...
Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)
The version of Dell Wyse Management Suite installed on the remote host is prior to 3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2022-134 advisory. - Wyse Management Suite 3.7 and earlier contains a Sensitive Data Exposure vulnerability. A low privileged...
Hudson 代码问题漏洞
Hudson is a news website. A security vulnerability exists in versions of Hudson prior to 3.3.2, which stems from flawed XML API processing that allows access to potentially sensitive information on the Hudson main server file system...
DSK DSKNet SQL注入漏洞
DSK DSKNet is a data interaction program from DSK Japan. Their time and attendance data can be accessed interactively from any site connected to your network. A security vulnerability exists in DSK DSKNet 2.16.136.0 and 2.17.136.5, which originates from a SQL injection vulnerability in PresAbs.ph...
CVE-2022-29090
Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform...
IBM Security Verify Identity Manager 安全漏洞
IBM Security Verify Identity Manager is a security verification identity manager from IBM USA. A security vulnerability exists in IBM Security Verify Identity Manager version 10.0 that originates from the inclusion of sensitive information in the source code repository...
IBM Engineering Lifecycle Optimization 信息泄露漏洞
IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM product portfolio from IBM USA. They make it easier to collect and analyze data from across the development environment to make better decisions. Automate reporting to ensure the entire...
CVE-2021-39018
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726...