CVE-2024-9834 Improper data protection on Life2000 ventilator serial interface

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance...

CVE-2024-9834

CVE-2024-9834 affects the Baxter Life2000 ventilator via the serial interface, where improper data protection could let an attacker send/receive messages and cause unauthorized disclosure or unintended changes to device settings/performance. The ICS advisory lists concrete weaknesses contributing...

CVE-2024-42508

This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users...

CVE-2024-42508

This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users...

CVE-2024-42508

This vulnerability could be exploited, leading to unauthorized disclosure of information to authenticated users...

CVE-2024-42508

CVE-2024-42508 affects Hewlett Packard Enterprise OneView. The connected materials indicate a vulnerability that could cause unauthorized disclosure of information to authenticated users . CNNVD explicitly links this issue to HPE OneView versions prior to 9.20, implying a fix is provided in or af...

GitLab 12.5 < 17.2.9 / 17.3 < 17.3.5 / 17.4 < 17.4.2 (CVE-2024-9164)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user SSRF in Analytics Dashboard Viewing diffs of MR with conflicts can be slow HTMLi in OAuth page Deploy Key...

CVE-2024-9470

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data...

The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.

The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

CVE-2024-43258

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Store Locator Plus.This issue affects Store Locator Plus: from n/a through 2311.17.01...

CVE-2024-25157

An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification...

edk2: Predictable TCP Initial Sequence Numbers

A security flaw has been identified in EDK2, the open-source reference implementation of the UEFI specification. This vulnerability enables an unauthorized attacker to potentially disclose sensitive information...

WordPress plugin Events Calendar security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability in the WordPress...

CVE-2024-4576

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information...

CVE-2024-4576 TIBCO EBX File Inclusion Vulnerability

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information...

CVE-2024-4576 TIBCO EBX File Inclusion Vulnerability

The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information...

TIBCO Security Advisory: June 11, 2024 - TIBCO EBX - CVE-2024-4576

TIBCO EBX File Inclusion Vulnerability Original release date: June 11, 2024 Last revised: June 12, 2024 CVE-2024-4576 Source: TIBCO Software Inc. Products Affected TIBCO EBX versions 5.9.25 and below TIBCO EBX versions 6.1.3 HF2 and below Component affected: EBX Add-ons Description The component...

GitLab < 15.1.6 (CVE-2022-3030)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control issue in GitLab CE/EE affecting all versions starting before 15.1.6, all versions from 15.2 before 15.2.4, all versions from 15.3 before 15.3.2 allows disclosure of pipeline...

MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

If an issue references a note that belongs to another issue that the user doesn't have access to, then it gets hyperlinked. Clicking on the link gives an access denied error as expected, yet some information remains available via the link, link label, and tooltip. Impact Disclosure of the followi...

openEuler 安全漏洞

openEuler is an operating system from the Open Atom Open Source Foundation. A security vulnerability exists in openEuler that stems from the presence of unauthorized disclosure of sensitive information...