207 matches found
CVE-2022-33728
Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal...
CVE-2022-30753
Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permission...
Malicious code in @dsgnsys/editor-elements-corvid-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b10565ae7535ccd77e6a0ebeca29f381be3782e65b8b2bd71da01783df60d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the getcfg.php file in D-Link DIR816L router microprogramming software allows a hacker to gain access to the device.
The vulnerability of the getcfg.php file in D-Link DIR816L router microprogramming software is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain access to the device through a specially created malicious load...
The vulnerability of the core_user class implementation in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the coreuser class implementation in the virtual learning environment Moodle is related to deficiencies in displaying hidden user fields. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the PuppetDB database management system lies in the insufficient protection of registration data, allowing attackers to gain access to confidential information.
The vulnerability of the PuppetDB database management system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...
WordPress plugin 安全漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Salon booking system Free and Pro has an access control error vulnerability that stems from improper authorizati...
Design/Logic Flaw
Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...
Google Android 安全漏洞
Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has a security vulnerability that stems from a privilege bypass in the settings provider program, which could be exploited by attackers to gain access to sensitive information...
Google Android 安全漏洞
Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability that could be exploited by attackers to gain access to sensitive information...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Device Policy. An attacker could use this vulnerability to obtain sensitive information...
CVE-2022-25823
Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log...
The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS, related to the disclosure of information, allows attackers to gain access to confidential data.
The vulnerabilities of iOS, iPadOS, tvOS, watchOS, and macOS are related to the exposure of information. Exploiting these vulnerabilities can allow attackers to gain access to confidential information...
Bentley Systems MicroStation 缓冲区错误漏洞
Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting. An information disclosure vulnerability exists in Bentley MicroStation CONNECT, which can be exploited by attackers to obtain sensitive information...
The vulnerability of the k8s module of the Ansible configuration management system, related to the disclosure of information, allows attackers to gain access to confidential data.
The vulnerability of the k8s module in the Ansible configuration management system is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data.
The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
EVGA Precision XOC 安全漏洞
EVGA Precision XOC is EVGA's This software allows you to fine-tune your NVIDIA graphics card to maximize cooling and performance. A security vulnerability exists in EVGA Precision XOC, which can be exploited by attackers to access sensitive components and data...
Google Android 信息泄露漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which can be exploited by attackers to cause local information disclosure without additional execution privileges...
vivo Jovi Smart Scene 安全漏洞
Vivo Jovi Smart Scene is used by China's Vivo to provide users with efficient, interactive and decision-making personalized services. The vivo Jovi Smart Scene suffers from a security vulnerability that allows an attacker to access sensitive information stored in the jovi Smart Scene module by...
CVE-2021-40364
A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC04, SIMATIC PCS 7 V9.1 All versions V9.1 SP1, SIMATIC WinCC V15 and earlier All versions V15 SP1 Update 7, SIMATIC WinCC V16 All versions V16 Update 5, SIMATIC WinCC V17 All versions...