The vulnerability of the ansible-connection module in the Ansible Configuration Management system, related to the disclosure of information in error messages, allows a perpetrator to gain access to confidential data.

The vulnerability of the ansible-connection module in the Ansible Configuration Management system, including Ansible Core, Ansible Base, is related to the disclosure of information in error messages. Exploiting this vulnerability can allow attackers to access confidential data...

The vulnerability in Firefox ESR and Firefox web browsers relates to the insufficient elimination of certain elements in the request, allowing an attacker to access confidential data.

The vulnerability in web browsers Firefox ESR and Firefox is related to insufficient elimination of special elements in requests. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the Thunderbird email client, related to the exposure of information, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the predictOrdered() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits. This vulnerability allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the predictOrdered function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the WebRTC component in the Firefox web browser, related to memory usage after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the Google Chrome web browser, related to reading data beyond the allowed buffer size, allows a hacker to gain access to confidential data.

The vulnerability in the Google Chrome web browser relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the Cisco Smart License Utility software management software lies in its ability to disclose information through registration files, allowing a violator to gain unauthorized access to confidential information and unauthorized access to the API.

The vulnerability of the Cisco Smart License Utility software relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential information and to obtain unauthorized access to...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. Huawei HarmonyOS and EMUI have a security vulnerability that can be exploited by an attacker to cause...

The vulnerability of the Active Storage component in the Ruby on Rails software framework allows unauthorized individuals to access confidential information. This vulnerability enables attackers to obtain sensitive data.

The vulnerability of the Active Storage component in the Ruby on Rails programming framework relates to the sending of Set-Cookie headers along with user session cookies when handling large binary objects. Exploiting this vulnerability can allow attackers to obtain confidential information...

The vulnerability of the mod_css_styles function in the Cascading Style Sheet Handler component of the RoundCube email client allows a hacker to disclose confidential information.

The vulnerability of the modcssstyles function in the Cascading Style Sheet Handler component of the RoundCube email client is related to insufficient filtering of the sequence of tokens in CSS styles displayed in email messages. Exploiting this vulnerability could allow an attacker to disclose...

EulerOS Virtualization 2.12.1 : python-cryptography (EulerOS-SA-2024-2315)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured message...

PT-2024-9158 · Nextcloud +1 · Nextcloud Enterprise Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 28.0.10 and prior to 29.0.7 Nextcloud Enterprise Server versions prior to 27.1.11.8, prior to 28.0.10, and prior to 29.0.7 Description: The issue is related to the insecure storage of confidential informatio...

ROS-20240827-04

A vulnerability in the CGI component of the Ruby programming language is related to the occurrence of an interpretation conflict when inserting unreliable input data into HTTP response header. Exploitation of the vulnerability allows an attacker acting remotely to gain access to confidential data...

The vulnerability of fwupd, a daemon used for managing firmware updates in Linux-based systems, allows an attacker to access confidential information.

The vulnerability of fwupd for managing firmware updates in Linux-based systems is related to the storage of automatically generated passwords in /etc/fwupd/redfish.conf without proper restrictions. Exploiting this vulnerability allows a remote attacker to access confidential information...

The vulnerability of the Linux operating system’s kernel’s ipv6 component, which allows a hacker to access confidential information

The vulnerability of the Linux operating system’s IPv6 kernel component is related to reading data beyond the boundary during the installation of HMAC. Exploiting this vulnerability can allow an attacker to access confidential information...

GO-2023-1730 Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

Debug mode leaks confidential data in Cilium in github.com/cilium/cilium...

EulerOS 2.0 SP12 : python-cryptography (EulerOS-SA-2024-2248)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS server...

PT-2024-8614 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A flaw was found in Moodle related to local file inclusion when restoring incorrect block backups. This issue may allow a remote attacker to access confidential data. The estimated number of...

PT-2024-41071 · Ооо 'Нпо Мир' · Конфигуратор Контроллеров Мир +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue may allow an attacker to gain unauthorized access to protected...