7841 matches found
PT-2022-22403 · WordPress · Wp Libre Form
Name of the Vulnerable Software and Affected Versions: WP Libre Form plugin versions 2.0.0 through 2.0.8 Description: The issue allows attackers to disclose sensitive information and perform unauthorized actions, such as listing and deleting submissions, without proper authentication...
PT-2022-6254 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux Kernel version 6.0-rc2 Description: The issue is related to the use of memory after it has been freed, specifically within the nft osf eval function. This can allow an attacker to disclose sensitive information on affected installations...
The vulnerability of the Chrome OS’ blocking screen allows a hacker to disclose protected information or cause a service failure.
The vulnerability of the Chrome OS blocking screen is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information or cause service failures...
The vulnerability of Google Chrome’s SplitScreen display mode allows a hacker to disclose protected information.
The vulnerability of Google Chrome’s SplitScreen display mode is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose protected information...
The vulnerability of Microsoft Edge and Google Chrome browser password managers allows attackers to expose protected information.
The vulnerability of Microsoft Edge and Google Chrome browser password managers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
ASB-A-219808546
In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value. This could lead to local information disclosure of network data with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the Extensions API component in Google Chrome and Microsoft Edge browsers allows a hacker to disclose protected information.
The vulnerability of the Extensions API of Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...
Trend Micro Maximum Security Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...
The vulnerability of microprogrammed network device software from Zyxel models USG FLEX 100(W), USG FLEX 200, USG FLEX 500, USG FLEX 700, USG FLEX 50(W), USG20(W)-VPN, ATP, VPN, USG/ZyWALL arises due to incorrect path name restrictions in the access-controlled catalog. This allows attackers to disclose sensitive information.
The vulnerability of microprogrammed network devices such as Zyxel USG FLEX 100W, USG FLEX 200, USG FLEX 500, USG FLEX 700, USG FLEX 50W, USG20W-VPN, ATP, VPN, USG/ZyWALL exists due to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow a...
The vulnerability of Google Chrome and Microsoft Edge browsers, related to insufficient validation of input data, allows attackers to disclose protected information.
The vulnerability of the File components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...
The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...
The vulnerability of the Extensions API of Google Chrome and Microsoft Edge browsers allows a hacker to disclose protected information or cause service failure.
The vulnerability of the Extensions API for Google Chrome and Microsoft Edge lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures through a specially created...
PT-2022-4618 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.2 through 15.2.3 GitLab CE/EE versions 15.3 through 15.3.1 Description: The issue is related to improper access control in GitLab, allowing the disclosure of confidential information via the Incident timeline events...
The vulnerability of the API interface of the microsoftware solution for Cisco Expressway and the microsoftware solution for the Cisco TelePresence Video Communication Server allows a perpetrator to disclose protected information and cause service failures.
The vulnerability of the API interface of the microprogramming software for Cisco Expressway and the microprogramming software for the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to...
WordPress plugin Sensei LMS 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...
The vulnerability of the dialog window, the call-response OPC-server WorkstationST, allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the dialog window, the call-response OPC-server WorkstationST, is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
CRI-O 安全漏洞
CRI-O is a lightweight container runtime environment for the Kubernetes system. CRI-O suffers from a security vulnerability that stems from the fact that if an attacker has direct access to an affected container where a supplemental group is used to set access permissions and is able to execute...
Design/Logic Flaw
A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...
Elastic Cloud Enterprise 3.4.0 Security Update
Elastic Cloud Enterprise Sensitive information disclosure issue ESA-2022-10 A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in th...
