7697 matches found
WordPress plugin HT Event – WordPress Event Manager Plugin for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
GHSA-JX45-XP6Q-CWJC Jenkins Zoom Plugin Stores Sensitive Information in Cleartext
Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access...
CVE-2024-13694 WooCommerce Wishlist <= 1.8.7 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
The WooCommerce Wishlist High customization, fast setup,Free Elementor Wishlist, most features plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.7 via the downloadpdffile function due to missing validation on a user controlled key. Th...
WordPress plugin Elementor Website Builder Pro 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
The vulnerability of the `ksmbd_vfs_stream_read()` function in the KSMBD daemon of the Linux operating system allows a hacker to disclose protected information and cause service failures.
The vulnerability of the ksmbdvfsstreamread function in the KSMBD daemon of the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information and cause service failures by...
UBUNTU-CVE-2024-0149
NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...
UBUNTU-CVE-2024-0150
NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before the beginning of a buffer. A successful exploit of this vulnerability might lead to information disclosure, denial of service, or data tampering...
PT-2025-1569 · Nvidia · Cuml +2
Name of the Vulnerable Software and Affected Versions: NVIDIA RAPIDS affected versions not specified Description: The issue is related to a deserialization of untrusted data in cuDF and cuML, which could lead to code execution, data tampering, denial of service, and information disclosure...
The vulnerability of the queued_write_lock_slowpath() function in the locking/qrwlock.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the queuedwritelockslowpath function in the locking/qrwlock.c component of the Linux operating system’s kernel is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a service failure...
IBM Security Directory Integrator和IBM Security Verify Directory Integrator 安全漏洞
IBM Security Directory Integrator and IBM Security Verify Directory Integrator are both products of International Business Machines IBM.IBM Security Directory Integrator is an integrated development environment and runtime service. IBM Security Verify Directory Integrator is software for...
PT-2025-5315 · Apple · Macos Sonoma +4
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.3 macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 Description: The issue is related to the exposure of user contact information in system logging when a conversation is deleted i...
PT-2025-1440 · Ibm · Ibm Cloud Pak System
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak System versions 2.3.3.0 through 2.3.3.7 iFix1 Description: The issue is related to the disclosure of sensitive information in HTTP responses, which could aid in further attacks against the system. This could allow a remote...
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools relates to the disclosure of system data within the controlled area by unauthorized parties, allowing attackers to expose protected information.
The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that it allows unauthorized parties to access system data within the controlled area. Exploiting this vulnerability could enable attackers to disclose protected information remotely...
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows attackers to disclose protected information.
The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information using the T3/IIOP protocol...
The vulnerability of the software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP lies in the exposure of system data to unauthorized access within the controlled area. This allows attackers to disclose protected information.
The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP is related to the disclosure of system data that is not protected by permissions within the controlled area. Exploiting this vulnerability can allow a...
CVE-2024-49733
In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the IBM Security ReaQta information protection tool lies in its authentication procedures’ flaws, which allow attackers to disclose the protected information.
The vulnerability of the IBM Security ReaQta security tool is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
CP Plus CP-XR-DE21-S 安全漏洞
The CP Plus CP-XR-DE21-S is a wireless router from CP Plus. A security vulnerability exists in the CP Plus CP-XR-DE21-S that stems from insecure handling of cookie flags used in the web interface, which can be exploited by an attacker to obtain sensitive information and compromise the target syst...
The vulnerability of the Tungsten Automation Power PDF software for working with PDF files lies in the ability to read data beyond the acceptable range of memory, allowing an intruder to disclose protected information.
The vulnerability of the software for working with PDF files from Tungsten Automation Power PDF is related to reading beyond the allowed range in memory during PDF file syntax analysis. Exploiting this vulnerability can allow an attacker to disclose protected information...