PT-2023-22741 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Arub...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox. An attacker could exploit this vulnerability to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code...

CVE-2023-0812

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

Authorization

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

CVE-2023-0812 Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

CVE-2023-0812 Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

CVE-2023-0812

CVE-2023-0812 affects the WordPress plugin Active Directory Integration / LDAP Integration (pre-4.1.1). The issue is unauthenticated data disclosure due to improper authorization or nonce handling on certain POST requests. A fix exists in version 4.1.1; affected users should upgrade to 4.1.1 or l...

The vulnerability of the configuration of NETGEAR RAX30 microprogramming software allows a hacker to disclose protected information and compromise the system.

The vulnerability of NETGEAR RAX30 router microprogramming software’s configuration lies in the unencrypted storage of critical information. Exploiting this vulnerability can allow attackers to disclose protected data and compromise the system...

PT-2023-16541 · WordPress · Active Directory Integration / Ldap Integration

Name of the Vulnerable Software and Affected Versions: Active Directory Integration / LDAP Integration WordPress plugin versions prior to 4.1.1 Description: The issue is related to improper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

kodbox 安全漏洞

kodbox is a network file manager. A security vulnerability exists in kodbox versions 1.2.x through 1.3.7, which stems from the presence of sensitive information disclosure issues...

The vulnerability of the Security component of the Oracle BI Publisher software allows a perpetrator to disclose protected information.

The vulnerability of the Security component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through HTTP requests...

Security Bulletin: IBM MQ is affected by a sensitive information disclosure vulnerability (CVE-2023-28514)

Summary An issue was identified with IBM MQ tracing logic that meant under certain circumstances sensitive data could be captured while IBM MQ trace was running. This data would be stored in plain text within the IBM MQ trace files. Vulnerability Details CVEID:CVE-2023-28514 DESCRIPTION: IBM MQ...

CVE-2022-37327

Improper input validation in BIOS firmware for IntelR NUC, IntelR NUC Performance Kit, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element, IntelR NUC Extreme, IntelR NUC 12 Extreme...

PT-2023-2882 · Openstack +3 · Openstack +3

Name of the Vulnerable Software and Affected Versions: OpenStack affected versions not specified Description: A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A remote, authenticated attacker could exploit thi...

Intel Server Board 缓冲区错误漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board BMC firmware versions prior to 2.90, which originates from an out-of-bounds read issue. An attacker could exploit the vulnerability to cause information disclosure...

webkitgtk: type confusion issue leading to arbitrary code execution

A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information...

PT-2023-12089 · Unknown · Asp Bootloader

Name of the Vulnerable Software and Affected Versions: ASP bootloader affected versions not specified Description: A Time-of-Check-to-Time-of-Use TOCTOU issue in the ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory, potentially resulting in S3 data...

PT-2023-2705 · Microsoft · Windows Nfs Portmapper +1

Name of the Vulnerable Software and Affected Versions: Windows NFS Portmapper affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows NFS Portmapper component, which can be exploited by a remote attacker to disclose protected...

PT-2023-2723 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

CVE-2023-22791

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in whi...