HPESBNS04713 rev.1 - OpenView Performance Mgt., Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Disclosure of Information, URL Redirection, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. OpenView Performance Mgt. T0684 T0684V01^ABG, T0684V01^ABH, T0684V01^ABI, T0684V01^ABJ, T0684V01^AB...

Dell Secure Connect Gateway 加密问题漏洞

The Dell Secure Connect Gateway Dell SCG is a secure connectivity gateway from Dell, USA. A cryptographic issue vulnerability exists in Dell Secure Connect Gateway version 5.24.00.14, which arises from the use of a corrupted or risky encryption algorithm, and can be exploited by a low-privileged...

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server allows attackers to escalate their privileges and disclose sensitive information.

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to increase their privileges and disclose sensitive...

CVE-2024-45713

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...

CVE-2024-45713

SolarWinds Kiwi CatTools is affected by CVE-2024-45713, a sensitive data disclosure vulnerability that occurs when a non-default troubleshooting setting is enabled. The issue is described as information disclosure with a local attack vector; the precise affected versions are not consistently spec...

CVE-2024-45713 SolarWinds Kiwi CatTools Sensitive Information Disclosure Vulnerability

SolarWinds Kiwi CatTools is susceptible to a sensitive data disclosure vulnerability when a non-default setting has been enabled for troubleshooting purposes...

PT-2024-7357 · Jetbrains · Jetbrains Ktor

Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 3.0.0 JetBrains Ktor versions prior to 2.3.13 Description: The issue is related to improper caching in the HttpCache Plugin, which could lead to response information disclosure. This allows an attacker to...

Acronis Cyber Files 安全漏洞

Acronis Cyber Files is a secure file synchronization and sharing solution from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Files versions prior to 9.0.0x24, which stems from spelling hijacking that results in the disclosure of sensitive information...

The vulnerability of the Kernel-Mode Driver component in Windows operating systems allows attackers to disclose sensitive information that is protected by this mechanism.

The vulnerability of the Kernel-Mode Driver component in Windows operating systems is related to improper boundary removal of critical data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-33499 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions prior to 9.0.0x24 Description: The issue is related to sensitive information disclosure due to spell-jacking. Recommendations: For versions prior to 9.0.0x24, update to a version equal to or later than...

WordPress plugin Freemius SDK 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-7177 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. Recommendations: At t...

Dell OpenManage Enterprise SQL注入漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. A SQL injection vulnerability exists i...

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the SAP Commerce Cloud e-commerce platform, related to insufficient protection of sensitive data, allows attackers to disclose protected information.

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to read a subset of accessible data...

PT-2024-10326 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert versions 1.0.0 through 1.0.2 Description: The issue is related to sensitive information disclosure through specially crafted API calls. It is associated with insufficient protection of service data due to the use of incompatible...

Creative com.creative.apps.xficonnect 安全漏洞

Creative com.creative.apps.xficonnect is a driver from Creative. A security vulnerability exists in Creative com.creative.apps.xficonnect version 2.00.02. A remote attacker could exploit this vulnerability to obtain sensitive information through the firmware update process...

WordPress plugin Stackable 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

PT-2024-41070 · Мир Кт-51 +1 · Мир Кт-51 +1

Name of the Vulnerable Software and Affected Versions: МИР КТ-51 and МИР конфигуратора контроллеров affected versions not specified Description: The issue is related to the implementation of the FTP protocol, which transmits data in an open form. This could allow a remote attacker to disclose...