PT-2024-23731 · Freecoap · Freecoap

Name of the Vulnerable Software and Affected Versions: FreeCoAP version 0.7 Description: The issue in the coap msg.c file allows remote attackers to cause a Denial of Service or potentially disclose information via a specially crafted packet. Recommendations: For FreeCoAP version 0.7, at the...

PT-2024-35533 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the targ...

PT-2024-36484 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a...

PT-2024-11050 · Expressionengine +7 · Expressionengine +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Insufficient user input filtering leads to arbitrary file read by non-authenticated attackers, resulting in sensitive information disclosure. There is n...

The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to execute arbitrary code and disclose protected information.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the assignment of a zero pointer. Exploiting this vulnerability allows an attacker to cause system failures and disclose sensitive information...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

CVE-2024-35189 Sensitive Data Disclosure Vulnerability in Connection Configuration Endpoints in Fides

Fides is an open-source privacy engineering platform. The Fides webserver has a number of endpoints that retrieve ConnectionConfiguration records and their associated secrets which can contain sensitive data e.g. passwords, private keys, etc.. These secrets are stored encrypted at rest in the...

PT-2024-6424 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open...

The vulnerability of the NVIDIA GPU Display Driver for Windows software allows a hacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA GPU Display Driver for Windows software lies in reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

The vulnerability of the NVIDIA GPU Display Driver for Linux software driver allows a hacker to disclose protected information and cause system failures.

The vulnerability of the NVIDIA GPU Display Driver for Linux software lies in errors related to privilege management. Exploiting this vulnerability can allow attackers to disclose sensitive information and cause service failures...

The vulnerability of the NVIDIA GPU Display Driver for Windows software allows a hacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA GPU Display Driver for Windows software driver is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or increase their privileges...

CVE-2024-23315

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...

silverstripe/framework's install.php script discloses sensitive data by pre-populating DB credential forms

When accessing the install.php script it is possible to extract any pre-configured database or default admin account password by viewing the source of the page, and inspecting the value property of the password fields...

The vulnerability of the RSA Key Exchange Handler component in the python-cryptography Python programming library allows a perpetrator to expose confidential data.

The vulnerability of the RSA Key Exchange Handler component in the python-cryptography Python programming library is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose confidential data remotely...

ZOHO ManageEngine ADSelfService Plus 安全漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. A security vulnerability exists in ZOHO ManageEngine ADSelfService Plus 6401 and prior versions, which stems from susceptibility to...

The vulnerability of the Remote Access Connection Manager (RASMan) service for Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s...

WordPress plugin NextScripts Social Networks Auto-Poster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

Sensitive Information Disclosure

ezsystems/repository-forms is vulnerable to Sensitive Information Disclosure. The vulnerability is caused due to missing permission checks before allowing access to user data. Specifically, the system did not properly verify if the user had the 'content' edit permissions, which allowed...

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP arises from incorrect restrictions on XML links to external objects. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the interactive browser environment for data analysis and visualization in Apache Zeppelin SAP is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service...