UBUNTU-CVE-2023-4458

A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this to disclose sensitive information on...

PT-2024-39873 · Unknown · Ventilator

Name of the Vulnerable Software and Affected Versions: Ventilator affected versions not specified Description: The issue allows for an unlimited number of failed login attempts with the Clinician Password or the Serial Number Clinician Password. This enables an attacker to perform a brute-force...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of NVIDIA’s graphics driver for Windows, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of NVIDIA’s graphics driver for Windows relates to reading data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

PT-2024-33303 · Unknown · Service Pc +1

Name of the Vulnerable Software and Affected Versions: Ventilator and Service PC affected versions not specified Description: The ventilator and the Service PC lack sufficient audit logging capabilities, making it difficult to detect malicious activity and conduct forensic examinations. An attack...

PT-2024-33307 · Unknown · Ventilator

Name of the Vulnerable Software and Affected Versions: Ventilator affected versions not specified Description: The ventilator's serial interface has its debug port enabled by default, allowing an attacker to send and receive unencrypted messages. This could result in unauthorized disclosure of...

PT-2024-30284 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a confused deputy flaw in the visitUris of multiple files, which could lead to local information disclosure without requiring...

Decidim::DecidimAwesome SQL注入漏洞

Decidim::DecidimAwesome is an add-on group for Decidim in the Decidim open source. An SQL injection vulnerability exists in Decidim::DecidimAwesome versions 0.9.0 through v0.11.1, which stems from the incorrect neutralization of a special element used. An attacker can exploit this vulnerability t...

PT-2024-8808 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family affected versions not specified Description: The issue is related to improper access control in the UEFI firmware, which may allow a privileged user to potentially enable information disclosure via local access. Th...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from System UI contains a sensitive information...

The vulnerability of the hns_roce_cq_event() function in the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hnsrocecqevent function in the drivers/infiniband/hw/hns/hnsrocecq.c driver for the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

WordPress plugin Stacks Mobile App Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Courier Management System track-result.php file SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...

The vulnerability of the YouGile project management service, related to inconsistencies in responses to incoming requests, allows a hacker to disclose protected information.

The vulnerability of the YouGile project management service is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

Code-Projects Courier Management System 安全漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from improper handling of the Consignment parameter in the file /track-result.php. An attacker could exploit this vulnerability to cause data disclosure or...

Courier Management System /login.php File SQL Injection Vulnerability

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that originates from improper handling of the txtusername parameter in the /login.php file. An attacker could exploit this vulnerability to disclose sensitive information...

The vulnerability of DrayTek Vigor router microprogramming software, related to insufficiently secure data encryption, allows attackers to disclose protected information and perform a “Man-in-the-Middle” attack.

The vulnerability of DrayTek Vigor router microprogramming software is related to insufficiently robust data encryption. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information and carry out a Middleware Incident Response Team MITM attack...

The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to trigger a service failure and expose the protected information.

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

The vulnerability of the Vendure corporate platform lies in improper cleaning of file paths and bypassing directories due to insufficient verification of input data. This allows attackers to disclose protected information or cause service failures.

The vulnerability of the Vendure corporate platform lies in improper cleaning of file paths and bypassing directories due to insufficient verification of input data. Exploitation of this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

Security Bulletin: IBM Concert is vulnerable to sensitive data disclosure (CVE-2024-49354)

Summary IBM Concert is vulnerable to sensitive information disclosure through specially crafted API Calls. Vulnerability Details CVEID:CVE-2024-49354 DESCRIPTION: IBM Concert is vulnerable to sensitive information disclosure through specially crafted API Calls. CWE:CWE-213: Exposure of Sensitive...