Lucene search
+L

110 matches found

Positive Technologies
Positive Technologies
added 2022/06/09 12:0 a.m.7 views

PT-2022-20877 · Owncloud · Owncloud

Name of the Vulnerable Software and Affected Versions: ownCloud versions prior to 10.10.0 Description: The issue concerns the improper removal of sensitive information before storage or transfer. Recommendations: For versions prior to 10.10.0, update to version 10.10.0 or later to resolve the iss...

7.5CVSS7.4AI score0.0124EPSS
Exploits0References7
OSV
OSV
added 2022/05/20 12:0 a.m.41 views

GHSA-VGJ7-895J-GPR6 Improper Removal of Sensitive Information Before Storage or Transfer in Strapi

An authenticated user with access to the Strapi admin panel can view private and sensitive data, such as email and password reset tokens, for API users if content types accessible to the authenticated user contain relationships to API users from:users-permissions. There are many scenarios in whic...

7.5CVSS7AI score0.00922EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:53 a.m.26 views

Apache Sentry may allow attacker to access/remove data from Sentry protected table

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS4.3AI score0.0131EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/05/13 1:53 a.m.21 views

GHSA-6XHJ-P29V-82J8 Apache Sentry may allow attacker to access/remove data from Sentry protected table

An authenticated user can execute ALTER TABLE EXCHANGE PARTITIONS without being authorized by Apache Sentry before 2.0.1. This can allow an attacker unauthorized access to the partitioned data of a Sentry protected table and can allow an attacker to remove data from a Sentry protected table...

8.8CVSS8.6AI score0.0131EPSS
Exploits0References3
Krebs on Security
Krebs on Security
added 2022/04/29 7:25 p.m.12 views

You Can Now Ask Google to Remove Your Phone Number, Email or Address from Search Results

Google said this week it is expanding the types of data people can ask to have removed from search results, to include personal contact information like your phone number, email address or physical address. The move comes just months after Google rolled out a new policy enabling people under the...

0.2AI score
Exploits0
Wired Threat Level
Wired Threat Level
added 2022/01/03 12:0 p.m.16 views

6 Ways to Delete Yourself From the Internet

You’ll never be able to get a clean slate—but you can significantly downsize your digital footprint...

2.3AI score
Exploits0
Wordfence Blog
Wordfence Blog
added 2021/11/02 2:4 p.m.19 views

Vulnerability in WP DSGVO Tools (GDPR) Plugin Allows Unauthenticated Page Deletion

Note: To receive disclosures like this in your inbox the moment they’re published, you can subscribe to our WordPress Security Mailing List. On September 27, 2021, the Wordfence Threat Intelligence team initiated the disclosure process for a vulnerability we found in WP DSGVO Tools GDPR, a...

6.4CVSS8.8AI score0.0393EPSS
Exploits1
Prion
Prion
added 2020/11/12 6:15 p.m.20 views

Input validation

Improper removal of sensitive information before storage or transfer in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.00438EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2020/03/25 10:15 p.m.0 views

DEBIAN-CVE-2020-6805

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

8.8CVSS8.5AI score0.0125EPSS
Exploits0References1
Prion
Prion
added 2020/03/25 10:15 p.m.21 views

Design/Logic Flaw

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

6.8CVSS8.8AI score0.0125EPSS
Exploits0References6Affected Software4
CVE
CVE
added 2020/03/25 9:14 p.m.287 views

CVE-2020-6805

CVE-2020-6805 affects Thunderbird (and Firefox) with a use-after-free in the Quota manager when removing data about origins for a recently closed tab, potentially causing a crash. Affected versions include Thunderbird < 68.6 and Firefox < 74/ESR68.6/ESR

8.8CVSS9AI score0.0125EPSS
Exploits0References6Affected Software3
AlpineLinux
AlpineLinux
added 2020/03/25 9:14 p.m.92 views

CVE-2020-6805

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

8.8CVSS9.2AI score0.0125EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/03/23 8:54 a.m.5 views

Mozilla: Use-after-free when removing data about origins

The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash...

8.8CVSS7.3AI score0.0125EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/03/23 8:32 a.m.3 views

Mozilla: Use-after-free when removing data about origins

The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash...

8.8CVSS7.3AI score0.0125EPSS
Exploits0References5
OSV
OSV
added 2020/03/17 7:12 p.m.4 views

USN-4306-1 dino-im vulnerabilities

It was discovered that Dino incorrectly validated inputs. An attacker could use this issue to possibly obtain, inject or remove sensitive information. This update also includes a fix to the encryption implementation in Dino to support 12 byte IVs, in addition to 16 byte IVs...

7.5CVSS7.1AI score0.02385EPSS
Exploits2References5
RedHat Linux
RedHat Linux
added 2020/03/16 10:47 a.m.4 views

Mozilla: Use-after-free when removing data about origins

The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash...

8.8CVSS7.3AI score0.0125EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/03/16 10:0 a.m.5 views

Mozilla: Use-after-free when removing data about origins

The Mozilla Foundation Security Advisory describes this flaw as: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash...

8.8CVSS7.3AI score0.0125EPSS
Exploits0References5
OSV
OSV
added 2020/03/11 12:0 a.m.8 views

UBUNTU-CVE-2020-6805

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

8.8CVSS7.3AI score0.0125EPSS
Exploits0References7
CVE
CVE
added 2019/09/27 5:16 p.m.237 views

CVE-2019-11747

CVE-2019-11747 affects Mozilla Firefox and Firefox ESR. The vulnerability stems from a bug in the History pane’s “Forget about this site” feature which, while intended to delete site-visit data, also removes HSTS settings for sites on the pre-load list. As a result, on the next visit, if a user u...

6.5CVSS6.8AI score0.01195EPSS
Exploits0References5Affected Software2
Kitploit
Kitploit
added 2019/02/21 8:27 p.m.144 views

Eraser - Secure Erase Files from Hard Drives on Windows

Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Eraser is currently supported under Windows XP with Service Pack 3, Windows Server 2003 with Service Pack 2,...

7AI score
Exploits0
Rows per page
Query Builder