Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client that stems from inadequate control flow management. It could allow an authenticated user to disclose information via network access...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

Intel QuickAssist Technology Security Vulnerability

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A security vulnerability exists in Intel QuickAssist Technology. An attacker could exploit...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of service...

Intel Unison Security Vulnerability

Intel Unison is an application from Intel Corporation USA used to synchronize various data before PCs and smartphones. A security vulnerability exists in Intel Unison software. An attacker exploiting this vulnerability could cause elevation of privilege, information disclosure, or denial of servi...

PT-2023-29238 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a maliciou...

Natus NeuroWorks Security Breach

Natus NeuroWorks is EEG analysis software from Natus. A security vulnerability exists in Natus NeuroWorks EEG Software prior to version 8.4 GMA3, which stems from the use of a default password for the Microsoft SQL Server service sa account, allowing an attacker to execute remote code or disclose...

PT-2023-6869 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: TELLUS versions 4.0.17.0 and earlier TELLUS Lite versions 4.0.17.0 and earlier Description: The issue is related to improper restriction of operations within the bounds of a memory buffer. If a user opens a specially crafted file, such as X1,...

PT-2023-6868 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: TELLUS versions 4.0.17.0 and earlier TELLUS Lite versions 4.0.17.0 and earlier Description: An out-of-bounds read issue exists, potentially allowing information disclosure and/or arbitrary code execution when a user opens a specially crafted...

The vulnerability of the Ghost content management system, related to inconsistencies in responses to incoming requests, allows a hacker to disclose confidential information.

The vulnerability of the Ghost content management system is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted HTTP request...

The vulnerability of the CreateAttachmentFromUri method in the Microsoft Exchange Server mail server allows a hacker to disclose protected information.

The vulnerability of the CreateAttachmentFromUri method in Microsoft Exchange Server’s mail server is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2023-5551 Moodle: forum summary report shows students from other groups when in separate groups mode

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...

UBUNTU-CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

CVE-2023-43568

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

The vulnerability in the interaction interface with the Aria2 file downloader’s WebUI-Aria2 lies in the incorrect limitation of the path name for the restricted access directory. This allows a perpetrator to disclose protected information.

The vulnerability in the interaction interface with the Aria2 file downloader’s WebUI-Aria2 relates to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform—the Elastic Charging Engine—allows a malicious actor to disclose protected information.

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform, specifically the Elastic Charging Engine, exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive...

Nokia G-040W-Q Security Vulnerability

The Nokia G-040W-Q is a modem from Nokia of Finland. A security vulnerability exists in Nokia G-040W-Q, which originates from an ICMP redirect message input validation vulnerability in the firewall. An unauthenticated, remote attacker can exploit this vulnerability by sending carefully crafted...

PT-2023-6891

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation MELSEC-F Series CPU modules affected versions not specified Mitsubishi Electric Corporation MELSEC iQ-F Series affected versions not specified Mitsubishi Electric Corporation MELSEC iQ-R series CPU modules...

Huawei HarmonyOS 信息泄露漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from information being stored in an improper location, thereby compromising confidentiality...