The vulnerability of the tftp_input() function in the src/tftp.c component of the TCP-IP Libslirp emulator allows a hacker to gain access to confidential data.

The vulnerability of the tftpinput function in the src/tftp.c component of the TCP-IP Libslirp emulator relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the slirp.c component of the TCP-IP Libslirp emulator allows a hacker to access confidential data.

The vulnerability of the slirp.c component in the Libslirp TCP-IP emulator involves reading data beyond the allowable buffer size. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of information, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability in the `src/ncsi.c` component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.

The vulnerability of the src/ncsi.c component of the TCP-IP Libslirp emulator is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

The vulnerability of the Transport Layer Security library GnuTLS, related to information disclosure due to incompatibilities, allows attackers to gain access to confidential data.

The vulnerability of the Transport Layer Security library GnuTLS is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of the bootp_input() function in the src/bootp.c component of the TCP-IP Libslirp emulator allows a attacker to access confidential data.

The vulnerability of the bootpinput function in the src/bootp.c component of the TCP-IP Libslirp emulator involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the ReportLab Python library for creating PDF files allows attackers to gain access to confidential data.

The vulnerability of the ReportLab Python library for creating PDF files is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

The vulnerability of the Mbed TLS software arises from a temporary lateral channel in private RSA operations, which allows attackers to execute the Marvin attack and gain access to confidential information.

The vulnerability of the Mbed TLS software exists due to a temporal side channel in private RSA operations. Exploiting this vulnerability allows an attacker operating remotely to execute the Marvin attack and gain access to confidential information...

PT-2024-2258 · Unknown · Trace Mode 7

Name of the Vulnerable Software and Affected Versions: TRACE MODE 7 affected versions not specified Description: The issue is related to the storage of confidential information in unencrypted form in memory. Exploitation of this issue could allow an attacker to gain unauthorized access to protect...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

CVE-2023-50782

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...

Design/Logic Flaw

A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...

Design/Logic Flaw

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data...

CVE-2023-50782

CVE-2023-50782 affects the python-cryptography library across multiple Linux distributions. The underlying issue is a Bleichenbacher timing/PKCS#1 v1.5 RSA decryption handling flaw that could allow a remote attacker to decrypt TLS RSA-exchange messages, potentially exposing confidential data. Aff...

The vulnerability of the Jenkins GitLab Branch Source Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Jenkins GitLab Branch Source Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...

The vulnerability of the Hotspot component of Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition software allows attackers to access confidential information.

The vulnerability of the Hotspot component in Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential...

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools in the enterprise resource management system makes it possible for a perpetrator to access confidential information.

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools in the enterprise resource management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to access confidential information...

PT-2024-1428 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7270 Description: The issue is related to incorrect restriction of directory path names with limited access, allowing admin users to view names of arbitrary directories via path traversal. This...

The vulnerability of the Security component of Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition software allows attackers to access confidential information.

The vulnerability of the Security component of Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows attackers to access confidential information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential information remotely...