7696 matches found
Out-of-bounds read vulnerability in OMRON CX-Programmer
Overview CX-Programmer provided by OMRON Corporation contains an out-of-bounds read vulnerability CWE-125, CVE-2025-0591. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Having a user open a specially crafted file may lead to information...
Atos Eviden IDRA和Atos Eviden IDCA 安全漏洞
Atos Eviden IDRA and Atos Eviden IDCA are both applications from Atos France. A security vulnerability exists in Atos Eviden IDRA and Atos Eviden IDCA that stems from the presence of a multi-partition privilege override that can lead to the disclosure of sensitive data...
The vulnerability of the Knowledge Space integrated planning platform, which involves disclosing information about application users, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Knowledge Space integrated planning platform relates to the disclosure of user information within the application. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2025-25992
SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...
SUSE CVE-2022-31630
In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar function, the read outside allocated buffer will be used. This can lead to crashes or...
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. This allows attackers to gain unauthorized access and disclose the protected information.
The vulnerability of the web service for transmitting information through temporary links, Password Pusher, is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access and disclose the protected information...
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs lies in the ability to read data outside of the allowed range in memory, allowing an attacker to disclose protected information.
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Schneider Electric ASCO 5310和ASCO 5350 安全漏洞
The Schneider Electric ASCO 5310 is a single-channel remote alarm from Schneider Electric France. A security vulnerability exists in the Schneider Electric ASCO 5310 and ASCO 5350, which stems from the inclusion of a sensitive information plaintext transfer vulnerability that could lead to data...
Intel Processors 输入验证错误漏洞
Intel Processors are a family of processors from Intel Corporation USA. Intel Processors suffers from an input validation error vulnerability that stems from improper UEFI firmware input validation, which could allow a privileged user to disclose information via local access...
The vulnerability in macOS operating systems, related to reading data beyond the allowed range of memory, allows an attacker to disclose sensitive information that is protected by security measures.
The vulnerability of macOS operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can lead to the disclosure of protected information...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to execute arbitrary code, trigger service failures, or disclose sensitive information.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or disclose sensitive information...
HCL Connections 安全漏洞
HCL Connections is a suite of enterprise collaboration platforms from HCL Corporation, USA. A security vulnerability exists in HCL Connections version 2.0.2, which stems from mishandling of request data and can lead to disclosure of sensitive information...
The vulnerability in macOS operating systems, related to reading data beyond the allowed range of memory, allows an attacker to disclose sensitive information that is protected by security measures.
The vulnerability of macOS operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can reveal the protected information...
CVE-2024-12755
Technical details (affected versions, root cause, patch status) are not provided in the connected documents; monitor for updates from Avaya and security bulletins.
CVE-2024-28989
SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...
Avaya Spaces 安全漏洞
Avaya Spaces is a cloud-based team collaboration tool from Avaya. A security vulnerability exists in Avaya Spaces. An attacker exploiting the vulnerability could modify page content or disclose sensitive information...
PT-2025-6267 · Avaya · Avaya Spaces
Name of the Vulnerable Software and Affected Versions: Avaya Spaces affected versions not specified Description: A Cross-Site Scripting XSS issue may have allowed unauthorized code execution and potential disclosure of sensitive information. Recommendations: At the moment, there is no information...
SolarWinds Web Help Desk 安全漏洞
SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A security vulnerability exists in SolarWinds Web Help Desk versions pri...
The vulnerability of microprogrammed software in programmable logic controllers ABB FBXi, FBVi, FBTi, and CBXi lies in the ability to disclose information through registration files in the log files. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of microprogrammed logic controllers such as ABB FBXi, FBVi, FBTi, and CBXi relates to the disclosure of information through registration files in the log files. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access t...