CVE-2024-42170

HCL MyXalytics is affected by a session fixation vulnerability. Cyber-criminals can exploit this by sending crafted URLs with a session token to access the victim's login session...

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the insecure storage of confidential information, allowing unauthorized access to protected data by attackers.

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse are related to the insecure storage of confidential information. Exploiting these vulnerabilities c...

The vulnerability of the Linux operating system’s OHCI kernel component, which allows a hacker to gain access to confidential information

The vulnerability of the Linux operating system’s OHCI kernel component is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the DevTools console in the Firefox web browser, related to the information disclosure feature, allows attackers to gain access to confidential data.

The vulnerability of the DevTools console in the Firefox web browser relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

OctoPrint 安全漏洞

OctoPrint is an open source application from OctoPrint. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability exists in OctoPrint version 1.10.2 and prior versions. An attacker exploited the vulnerability to retrieve, recreate, and delete a user's global API...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that is due to a flaw in the ACPM component. The vulnerability can be exploited by an attacker to obtain sensitive information...

Enalean Tuleap 安全漏洞

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A security vulnerability exists in Enalean Tuleap. An attacker exploiting the vulnerability could view tracker names that they should not ha...

Microsoft Copilot Studio 信息泄露漏洞

Microsoft Copilot Studio is an artificial intelligence chatbot from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Copilot Studio. An attacker exploiting this vulnerability could gain access to sensitive information. No information about this vulnerability ...

The vulnerability of Intel Microcode processors lies in incorrect calculations, which allows attackers to gain access to confidential data.

The vulnerability of Intel Microcode processors involves incorrect calculations. Exploiting this vulnerability allows attackers to gain access to confidential data...

The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.

The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

Adobe Framemaker 信息泄露漏洞

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An information disclosure vulnerability exists in Adobe Framemaker Publishing Server, which can be exploited by an...

The vulnerability of Telit Cinterion modem microprogramming software, related to information disclosure, allows attackers to gain access to protected information.

The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to protected information...

LG Simple Editor 安全漏洞

LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. LG Simple Editor suffers from an information disclosure vulnerability that can be exploited by attackers to disclose sensitive information...

The vulnerability of the ReportLab Python library for creating PDF files allows attackers to gain access to confidential data.

The vulnerability of the ReportLab Python library for creating PDF files is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

hw: amd: Cross-Process Information Leak

A flaw was found in hw, in “Zen 2” CPUs. This issue may allow an attacker to access sensitive information under specific microarchitectural circumstances...

SUSE SLES12 Security Update : rear23a (SUSE-SU-2024:0148-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:0148-1 advisory. - CVE-2024-23301: Fixed ReaR creates world-readable initrd with GRUBRESCUE=Y. bsc1218728 Tenable has extracted the preceding description block directly...

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL Launch versions 7.0 through 7.0.5.18, 7.1 through 7.1.2.14, 7.2...

IBM AIX 安全漏洞

IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. An elevation of privilege vulnerability exists in IBM AIX and VIOS, which can be exploited by an attacker to gain elevated privileges...

Huawei Smart Screen Authorization Issue Vulnerability

Huawei Smart Screen Huawei Smart Screen is China's Huawei Huawei equipped with a 120Hz high refresh rate screen and HarmonyOS system, providing the ultimate smooth sports experience and full-scene smart life. Huawei Smart Screen has an authorization issue vulnerability that can be exploited by...

Cisco Identity Services Engine 安全漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An arbitrary file write vulnerability exists in...