SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server. An authenticated attacker could exploit the vulnerability to invoke underlying transactions, which could lead to the disclosure of user-related...

PT-2024-5994 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description: The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this...

Microsoft Bluetooth Driver 缓冲区错误漏洞

Microsoft Bluetooth Driver is an application software Bluetooth driver from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Bluetooth Driver. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected:...

PT-2024-7628 · Sap · Abap Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP and ABAP Platform affected versions not specified Description: The issue is related to a missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform. This allows an authenticate...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to insufficient protection of sensitive data, allows attackers to disclose confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of operational data when processing query parameters. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending special...

The vulnerability of the UploadCustomModule (/cgi-bin/cstecgi.cgi) function in the TOTOLINK A3300R router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UploadCustomModule /cgi-bin/cstecgi.cgi function in the TOTOLINK A3300R router microprogramming software arises due to an overflow of the buffer on the stack during the processing of the File parameter. Exploiting this vulnerability allows a malicious actor to compromise...

PT-2024-38443 · Logsign · Logsign Unified Secops Platform

Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Logsign Unified SecOps Platform. Authentication is required to...

NVIDIA多款产品 安全漏洞

NVIDIA Mellanox OS and others are products of NVIDIA Corporation.NVIDIA Mellanox OS is a switch software.NVIDIA ONYX is an extremely flexible and scalable Ethernet-based switch operating system.NVIDIA Skyway is a gateway system. A security vulnerability exists in several NVIDIA products that stem...

PT-2024-5516 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.9 through 17.0.6 GitLab CE/EE versions 17.1 through 17.1.4 GitLab CE/EE versions 17.2 through 17.2.2 Description: An issue has been discovered in GitLab CE/EE where access tokens may have been logged when an API reque...

PT-2024-38408

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to...

PT-2024-38399 · Trimble · Trimble Sketchup Pro

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Pro affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this, where the...

Nuxt 安全漏洞

Nuxt is a free open source framework from Nuxt Open Source. A security vulnerability exists in Nuxt versions prior to 1.4.5, which stems from incorrect proxy request path parsing, allowing an attacker to change the requested scheme and host, potentially leading to sensitive data disclosure...

UBUNTU-CVE-2024-7319

An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through the OpenStack stack abandon command with the hidden feature set to True and the CVE-2023-1625 fix applied...

WordPress plugin Forminator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-29338

Name of the Vulnerable Software and Affected Versions netbird version 0.28.4 Description The issue concerns a static initialization vector IV used in the encrypt function, allowing attackers to obtain sensitive information. This static IV is utilized in the github.com/netbirdio/netbird code...

The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...

The vulnerability in the web interface of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software allows a perpetrator to execute arbitrary code and expose sensitive information.

The vulnerability of the web interface of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tool is related to the lack of security measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious acto...

The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to disclose protected information or cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause system failures...

PT-2024-10382 · Firebird · Firebird

Name of the Vulnerable Software and Affected Versions: Популяционный раковый регистр and Госпитальный раковый регистр affected versions not specified Description: The issue is related to the Firebird component of the software, which stores passwords along with decryption means. This could allow a...

The vulnerability of the `copy_to_user` function in the s390 kernel of the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the copytouser function in the s390 kernel of the Linux operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...