CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

Information disclosure

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

CVE-2022-3611

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

CVE-2022-3611

Technical details (affected products, versions, root cause, or exploit information) are not publicly available in the provided documents; monitor for updates.

[SECURITY] Fedora 37 Update: redis-7.0.14-1.fc37

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

PT-2023-13455 · Lenovo · Lenovo App Store

Name of the Vulnerable Software and Affected Versions: Lenovo App Store affected versions not specified Description: An information disclosure issue has been identified in the Lenovo App Store, which may allow some applications to gain unauthorized access to sensitive user data used by other...

CVE-2022-3611: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications...

Lenovo App Store Information Disclosure Vulnerability

Lenovo App Store is a desktop application from the Chinese company Lenovo. The Lenovo App Store suffers from an information disclosure vulnerability that arises from unauthorized access by certain applications to sensitive user data used by other unrelated applications...

Store Exporter Plugin XSS

The vulnerability of the Store Exporter plugin for WooCommerce in the WordPress content management system is related to the failure to remove special elements during the processing of the woo-ce admin page. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

Galaxy Store Incorrect Default Permissions

The vulnerability of the Galaxy Store app is related to incorrect default permissions. Exploiting this vulnerability allows a hacker to install apps from the Galaxy Store without any interaction with the user...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-stackdriver-exporter, terraform-provider-sendgrid-fips, conftest-fips, kubernetes-csi-livenessprobe-fips, kubeflow-fips, cortex, prometheus-blackbox-exporter, k3d, dynamic-localpv-provisioner-fips, vault-csi-provider, slsa-verifier, scorecard, kubevela,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: k3d, spark-operator, kubeflow, slsa-verifier, src, aactl, kubevela, cortex, scorecard, terraform-provider-sendgrid, buildkitd, kubescape, up, dgraph...

CVE-2023-34085 User Attribute Disclosure via DynamoDB Data Stores

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request...

CVE-2023-37532

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

Design/Logic Flaw

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

CVE-2023-37532

CVE-2023-37532 affects HCL Commerce Remote Store server. The connected sources describe a directory traversal vulnerability that lets an attacker read arbitrary files on the target system by sending a specially crafted URL. The core issue is a failure to properly sanitize file paths, enabling acc...

CVE-2023-37532: Improper Limitation of a Pathname to a Restricted Directory

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...

PT-2023-26010

Name of the Vulnerable Software and Affected Versions HCL Commerce Remote Store server affected versions not specified Description The issue allows a remote attacker, using a specially-crafted URL, to read arbitrary files on the system. Recommendations At the moment, there is no information about...