7937 matches found
PT-2024-12716 · Ibm · Ibm Security Access Manager
Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue could disclose sensitive information to a local user due to improper permission controls. Recommendations: For versions 10.0.0.0 through 10.0.7.1,...
CVE-2024-36829
Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted query string...
PT-2024-6610 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the targ...
The vulnerability of the software for deploying and executing AI models, NVIDIA Triton Inference Server (formerly TensorRT Inference Server), allows a perpetrator to disclose protected information.
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Autodesk AutoCAD 缓冲区错误漏洞
Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. An out-of-bounds write vulnerability exists in Autodesk AutoCAD version 2024.1.4, which stems from a lack of proper validation of user-supplied data when parsing maliciously crafted CATPART files...
PT-2024-6389 · Libnbd +7 · Libnbd +7
Name of the Vulnerable Software and Affected Versions: libnbd affected versions not specified Description: The issue is related to a flaw in the libnbd library, where the client does not always correctly verify the NBD server's certificate when using TLS to connect to an NBD server. This allows a...
PT-2024-28264 · Wavlink · Wavlink Wn551K1
Name of the Vulnerable Software and Affected Versions: Wavlink WN551K1 affected versions not specified Description: The issue allows a remote attacker to obtain sensitive information via the ExportAllSettings.sh component. Recommendations: At the moment, there is no information about a newer...
The vulnerability of the Adobe Media Encoder application, related to the execution of operations beyond the buffer in memory, allows an attacker to disclose protected information.
The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system’s security measures...
The vulnerability of Adobe Audition relates to the operation of operations beyond buffer boundaries in memory. This allows attackers to exploit the protected information and bypass the ASLR protection mechanism.
The vulnerability of Adobe Audition is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information and bypass the ASLR protection mechanism...
The vulnerability of the Downloads component of Microsoft Edge and Google Chrome browsers allows a perpetrator to disclose protected information or cause service failures.
The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...
The vulnerability of the Memory Allocator component in Microsoft Edge and Google Chrome browsers allows attackers to disclose sensitive information or cause service interruptions.
The vulnerability of the Memory Allocator component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures through a specially crafted...
The vulnerability of Kubernets Rancher cluster management software lies in the lack of access restrictions on protected information. This allows attackers to expose the protected data and gain administrative control over the Kubernetes cluster.
The vulnerability of Kubernets Rancher cluster management software is related to the lack of restrictions on access to protected information. Exploiting this vulnerability allows a malicious actor to disclose protected data and gain administrative control over the Kubernetes cluster...
PT-2024-7163 · Vmware · Vmware Nsx
Name of the Vulnerable Software and Affected Versions: VMware NSX affected versions not specified Description: The issue is related to a content spoofing vulnerability. An unauthenticated malicious actor may be able to craft a URL and redirect a victim to an attacker-controlled domain, leading to...
The vulnerability of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools lies in the fact that manipulating an unknown input can lead to a timing mismatch vulnerability, allowing attackers to disclose protected information.
The vulnerability of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition software lies in the manipulation of an unknown input, leading to a time mismatch vulnerability. Exploiting this vulnerability could allow an attacker to disclose the protected information...
CVE-2024-21988
StorageGRID formerly StorageGRID Webscale versions prior to 11.7.0.9 and 11.8.0.5 are susceptible to disclosure of sensitive information via complex MiTM attacks due to a vulnerability in the SSH cryptographic implementation...
PT-2024-19140 · Netapp · Storagegrid
Name of the Vulnerable Software and Affected Versions: StorageGRID formerly StorageGRID Webscale versions prior to 11.7.0.9 StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.5 Description: The issue allows for the disclosure of sensitive information via complex Man-in-the-Middle...
CVE-2024-0089
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering...
CVE-2024-32910
In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-29780
In hwbccnsdeprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-32910
In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...