7706 matches found
WordPress plugin MetForm security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2024-4229
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description The issue is related to a use after free in PDFium, which can potentially allow a remote attacker to exploit heap corruption via a crafted...
PT-2024-4235 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Downloads component, which could allow a remote attacker to obfuscate...
PT-2024-4244 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Audio component, which could allow a remote attacker to exploit heap corruption via a...
The vulnerability of the `bgp_capability_msg_parse()` function in the BGP routing software implementation for Unix-like systems allows a attacker to cause service failures or disclose sensitive information.
The vulnerability of the bgpcapabilitymsgparse function in the BGP routing daemon of the FRRouting software for Unix-like systems involves reading data beyond the memory limit. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information...
USN-6811-1 openjdk-lts vulnerabilities
It was discovered that the Hotspot component of OpenJDK 11 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. CVE-2024-21011 It was discovered that OpenJDK 11 incorrectly performed reverse DNS query...
IBM Engineering Requirements Management DOORS Next Code Issue Vulnerability
IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A code issue vulnerability exists in IBM Engineering Requirements...
PT-2024-6413 · Pdf Xchange · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this, where the targ...
PT-2024-4362 · Nvidia +3 · Nvidia Gpu Driver +3
Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Driver for Windows and Linux affected versions not specified Description: The issue is related to an improper check or handling of exception conditions, which might lead to denial of service. Additionally, it is mentioned that...
PT-2024-6410 · Tracker Software Products · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to an out-of-bounds read in the memory due to improper validation of user-supplied data when parsing EMF files. This can allow remote attackers to disclose...
scikit-learn Security Vulnerabilities
scikit-learn is an open source Python-based machine learning package that supports spam detection, image recognition, and prediction of continuous-valued attributes of associations. A security vulnerability exists in scikit-learn 1.4.1.post1 and earlier versions, which stems from accidentally...
PT-2024-13833 · Samsung · Exynos 1330 +13
Name of the Vulnerable Software and Affected Versions: Exynos versions 980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123 Description: An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos...
PT-2024-22769 · Samsung · Exynos
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor, Wearable Processor, and Modem Exynos versions 980 through 2400 Exynos Modem versions 5123 through 5300 Description: An issue was discovered in the baseband software of the affected processors. The software does not...
RHEL 4 : mod_python (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - modpython arbitrary data disclosure flaw CVE-2004-2680 Note that Nessus has not tested for this issue but has inste...
The vulnerability of the catalog of backup copies of software for shift management and overtime tracking by LaborOfficeFree allows a perpetrator to disclose protected information.
The vulnerability of the backup catalog for LaborOfficeFree software for shift management and overtime tracking is related to lack of access control. Exploiting this vulnerability could allow an attacker to disclose the protected information...
The vulnerability of the SAP Master Data Governance data management platform lies in the absence of authentication procedures, which allow attackers to escalate their privileges and disclose protected information.
The vulnerability of the SAP Master Data Governance data management platform is related to the absence of authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges and disclose sensitive information...
GHSA-RCVG-JJ3G-RJ7C Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...
Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints
The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the application database, and the associated endpoints are no...
PUB-A-324894484
In handlemsgshmmapreq of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...