Information Disclosure

aimeos/ai-client-html is vulnerable to Sensitive Information Exposure. The vulnerability is due to debug information revealing sensitive information from environment variables in error logs, allowing attackers to potentially access confidential data...

PT-2024-7447 · Sap · Sap Landscape Management

Name of the Vulnerable Software and Affected Versions: SAP Landscape Management affected versions not specified Description: The issue is related to the REST Provider Definition response in SAP Landscape Management, which allows an authenticated user to read confidential data. This can cause a hi...

EulerOS 2.0 SP11 : python-cryptography (EulerOS-SA-2024-1844)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS server...

Important: Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update

Migration Toolkit for Applications 6.2.3 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

PT-2024-21699 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns incorrect permissions of Coredump binaries in Toshiba printers, allowing a local attacker to steal confidential information. Recommendations: At the moment, ther...

The vulnerability of the tls_new_ciphertext() function in the src/net/tls.c file of the iPXE network loading standard’s Preboot Execution Environment implementation, which allows a hacker to disclose confidential information

The vulnerability of the tlsnewciphertext function in the src/net/tls.c file of the iPXE network loading standard implementation allows for unauthorized access. Exploiting this vulnerability could enable a malicious actor to disclose confidential information by manipulating the padlen argument...

CVE-2024-35210

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V1.2. The affected web server is not enforcing HSTS. This could allow an attacker to perform downgrade attacks exposing confidential information...

The vulnerability of the web interface of the microprogramming software for routers Maipu MP1800X-50 allows a hacker to obtain confidential information.

The vulnerability of the web interface of the microprogrammed software router Maipu MP1800X-50 is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information...

Moderate: Red Hat Security Advisory: OpenShift Virtualization 4.14.6 Images security update

Red Hat OpenShift Virtualization release 4.14.6 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which giv...

The vulnerability of the RSA Key Exchange Handler component in the Python m2crypto encryption and SSL tools allows a perpetrator to disclose confidential data.

The vulnerability of the RSA Key Exchange Handler component in encryption and SSL tools for Python’s m2crypto library is related to the decoding of captured messages on TLS servers that use RSA key exchange. Exploiting this vulnerability can allow a remote attacker to disclose confidential data...

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system, related to the lack of protection for operational data, allows a intruder to gain unauthorized access to confidential information.

The vulnerability of the Siemens RUGGEDCOM CROSSBOW access control system lies in the lack of protection for operational data. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to confidential information...

Important: Red Hat Security Advisory: OpenShift Virtualization 4.15.2 Images security update

Red Hat OpenShift Virtualization release 4.15.2 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which...

PT-2024-6103

Name of the Vulnerable Software and Affected Versions Requests versions prior to 2.32.0 Description The issue is related to the incorrect implementation of control flow in the Python Requests library, which can allow an attacker to access confidential data. When making requests through a Requests...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows an attacker to increase their privileges and gain access to confidential data

The vulnerability of the Win32k.sys component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to confidential data...

CVE-2024-33398

There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allows an attacker to impersonate the service account bound to this ClusterRole and use its high-risk privileges to list confidential information across the cluster...

PT-2024-25231 · Unknown · Piraeus-Operator

Name of the Vulnerable Software and Affected Versions: piraeus-operator versions 2.5.0 and earlier Description: The issue allows an attacker to impersonate the service account bound to a ClusterRole in piraeus-operator, which has been granted list secrets permission. This permission enables the...

The vulnerability in the Firefox web browser relates to improper memory release before deleting the last link, allowing a malicious actor to gain access to confidential data.

The vulnerability in the Firefox web browser relates to the improper release of memory before deleting the last link. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...