The vulnerability of the Codesys industrial automation software suite, related to the disclosure of information in the erroneous data area, allows a intruder to gain unauthorized access or cause service failures.

The vulnerability of the Codesys industrial automation software suite is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an intruder to gain unauthorized access or cause service failures...

PT-2023-2839 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: Codesys versions affected versions not specified Description: The issue is related to the disclosure of information in an error data area, potentially allowing a remote attacker to impact data integrity. Recommendations: At the moment, there ...

A vulnerability in the web interface for operating systems ArubaOS, allowing a hacker to read arbitrary files

The vulnerability in the web interface for operating systems ArubaOS relates to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

The vulnerability of the HTTP.sys driver on Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the HTTP.sys driver in Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SUSE CVE-2023-0597

A flaw possibility of memory leak in the Linux kernel cpuentryarea mapping of X86 CPU data to memory was found in the way user can guess location of exception stacks or other important data. A local user could use this flaw to get access to some important data with expected location in memory...

The vulnerability of the SPNEGO security mechanism for Microsoft Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the SPNEGO NEGOEX security mechanism for Microsoft Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the stex_queuecommand_lck() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the stexqueuecommandlck function in Linux operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to the disclosure of information in the erroneous data area, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the SSH key import function in multifunctional measuring devices SICAM GridEdge Essential ARM (6MD7881-2AA30), SICAM GridEdge Essential Intel (6MD7881-2AA40), SICAM GridEdge Essential Intel (6MD7881-2AA40), and SICAM GridEdge Essential with GDS Intel (6MD7881-2AA20) allows a hacker to execute arbitrary code.

The vulnerability of the SSH key import function in SICAM GridEdge Essential ARM 6MD7881-2AA30, SICAM GridEdge Essential Intel 6MD7881-2AA40, SICAM GridEdge Essential Intel 6MD7881-2AA40, and SICAM GridEdge Essential with GDS Intel 6MD7881-2AA20 devices relates to the disclosure of information in...

The vulnerability of the CIFS file system mounting utility package provided by cifs-utils for Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CIFS file system mounting utility package developed by cifs-utils for Linux operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

PT-2022-3723 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Network File System. It allows a remote attacker to disclose protected information due to an error in the data...

PT-2022-3720 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Hyper-V system, which can allow a remote attacker to disclose protected information due to an error in...

PT-2022-3659 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Kernel. It allows attackers to obtain sensitive information and potentially affect the system...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the disclosure of information in the error-prone data area, allows a perpetrator to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to confusion between tag names and branches. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the software for implementing the hypertext environment MediaWiki allows a perpetrator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the data...

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software PoDoFo allows a malicious actor to access confidential data.

The vulnerability of the IsNextToken function in the src/base/PdfToenizer.cpp component of the PDF processing software library is related to the disclosure of information in the error-prone data area. Exploiting this vulnerability allows an attacker to gain access to confidential data remotely...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Microsoft Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Microsoft Windows operating system relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Windows Defender antivirus program for the Windows operating system, related to the disclosure of information in the erroneous data area, allows a perpetrator to write arbitrary files.

The vulnerability of the Windows Defender antivirus program in the Windows operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious individual to identify locations in the file system that are excluded from Windows...

The vulnerability of the Microsoft Office software, related to the disclosure of information in the erroneous data area, allows for the disclosure of protected information.

The vulnerability of the Microsoft Office suite is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to disclose the protected information...