2622 matches found
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS version 13.7, which stems from an application that may disclose sensitive user information...
CVE-2024-44129
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Ventura 13.7. An app may be able to leak sensitive user information...
About the security content of macOS Ventura 13.7
About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
About the security content of macOS Sequoia 15
About the security content of macOS Sequoia 15 This document describes the security content of macOS Sequoia 15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Mac OS X Safari .webarchive File Format UXSS
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Mac OS X Safari .webarchive File Format UXSS', 'Description' = %q Generates a .webarchive file for Mac OS X Safari that will attemp...
PT-2024-41038 · Unknown · Knowledge Space
Name of the Vulnerable Software and Affected Versions: Knowledge Space affected versions not specified Description: The issue is related to the disclosure of user information in the Knowledge Space integrated planning platform. It allows a remote attacker to gain unauthorized access to protected...
The vulnerability of the TrueConf Server software, related to insufficient protection of operational data, allows attackers to gather information about system users.
The vulnerability of the TrueConf Server software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor to gather information about system users through API methods...
GO-2022-1220 usememos/memos may leak user information to an authenticated user in github.com/usememos/memos
usememos/memos may leak user information to an authenticated user in github.com/usememos/memos...
Moodle < 4.1.12, 4.2.x < 4.2.9, 4.3.x < 4.3.6, 4.4.x < 4.4.2 Multiple Vulnerabilities
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
CVE-2024-42464 Leak of user information
Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...
wget: Misinterpretation of input may lead to improper behavior
A flaw was found in wget. Incorrect handling of semicolons in the userinfo subcomponent of a URI allows it to be misinterpreted as part of the host subcomponent, potentially exposing user credentials...
CVE-2024-38502
CVE-2024-38502 involves Pepperl+Fuchs Device Master ICDM‑RX family devices with a stored XSS vulnerability. An unauthenticated remote attacker could exploit this flaw to cause information disclosure by stealing user data or potentially reboot the affected device. The description notes an stored X...
Exploit for Observable Discrepancy in 42Gears Suremdm
CVE-2023-3897 Username enumeration is possible through Bypassi...
CVE-2024-41734
Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability...
CVE-2024-41734 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability...
CVE-2024-7697
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697 Logical vulnerability in com.transsion.carlcare
Logical vulnerability in the mobile application com.transsion.carlcare may lead to user information leakage risks...
CVE-2024-7697
CVE-2024-7697 affects the mobile app com.transsion.carlcare and is described as a logical vulnerability that may lead to user information leakage. CVSS v3.1 base score 7.5 (HIGH) with Network attack vector, Low attack complexity, no privileges, no user interaction required. The connected document...