207 matches found
PT-2025-4000 · New Rock Technologies · Mx8G Voip Gateway +2
Name of the Vulnerable Software and Affected Versions: Affected products affected versions not specified Description: The Cloud MQTT service of the affected products supports wildcard topic subscription, which could allow an attacker to obtain sensitive information from tapping the service...
CVE-2024-54557
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An attacker may gain access to protected parts of the file system...
Tencent QQMail 安全漏洞
Tencent QQMail is a mailbox software of China Tencent Tencent. An unspecified vulnerability exists in Tencent QQMail, which can be exploited by attackers to access sensitive user information...
CVE-2024-42170
HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...
The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the insecure storage of confidential information, allowing unauthorized access to protected data by attackers.
The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse are related to the insecure storage of confidential information. Exploiting these vulnerabilities c...
The vulnerability of the Linux operating system’s OHCI kernel component, which allows a hacker to gain access to confidential information
The vulnerability of the Linux operating system’s OHCI kernel component is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the DevTools console in the Firefox web browser, related to the information disclosure feature, allows attackers to gain access to confidential data.
The vulnerability of the DevTools console in the Firefox web browser relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
OctoPrint 安全漏洞
OctoPrint is an open source application from OctoPrint. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint version 1.10.2 and prior versions. An attacker exploited the vulnerability to retrieve, recreate, and delete a user's global API...
Google Pixel 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is due to a flaw in the ACPM component. The vulnerability can be exploited by an attacker to obtain sensitive information...
Enalean Tuleap 安全漏洞
Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A security vulnerability exists in Enalean Tuleap. An attacker exploiting the vulnerability could view tracker names that they should not ha...
Microsoft Copilot Studio 信息泄露漏洞
Microsoft Copilot Studio is an artificial intelligence chatbot from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Copilot Studio. An attacker exploiting this vulnerability could gain access to sensitive information. No information about this vulnerability ...
The vulnerability of Intel Microcode processors lies in incorrect calculations, which allows attackers to gain access to confidential data.
The vulnerability of Intel Microcode processors involves incorrect calculations. Exploiting this vulnerability allows attackers to gain access to confidential data...
The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.
The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...
Adobe Framemaker 信息泄露漏洞
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An information disclosure vulnerability exists in Adobe Framemaker Publishing Server, which can be exploited by an...
The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows attackers to gain access to protected information.
The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to protected information...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...
The vulnerability of the ReportLab Python library for creating PDF files allows attackers to gain access to confidential data.
The vulnerability of the ReportLab Python library for creating PDF files is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
hw: amd: Cross-Process Information Leak
A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...
SUSE SLES12 Security Update : rear23a (SUSE-SU-2024:0148-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:0148-1 advisory. - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUBRESCUE=Y. bsc1218728 Tenable has extracted the preceding description block directly...
HCL Technologies HCL Launch Security Breach
HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch versions 7.0 through 7.0.5.18, 7.1 through 7.1.2.14, 7.2...