7706 matches found
The vulnerability of Telit Cinterion modem microprogramming software, related to the disclosure of information through variable environments, allows a intruder to gain access to protected information.
The vulnerability of Telit Cinterion modem microprogramming software is related to the disclosure of information through variable environments. Exploiting this vulnerability can allow an intruder to gain access to protected information...
PT-2024-6698 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The issue is related to an out-of-bounds read in the annotation handler of Foxit PDF Reader, which can allow an attacker to disclose sensitive information by opening a specially...
PT-2024-6418 · Unknown · Pdf-Xchange Editor
Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: The issue is related to an out-of-bounds read in the memory buffer when parsing U3D files in PDF-XChange Editor. This can allow an attacker to disclose sensitive information by...
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to disclose protected information.
The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in its ability to read data beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit that allows an attacker to bypass memory buffers, thereby enabling them to disclose protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to disclose protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...
The vulnerability of the FortiADC application delivery controller, related to the disclosure of system data that is not authorized for the controlled area, allows a perpetrator to view arbitrary data.
The vulnerability of the FortiADC application delivery controller is related to the disclosure of system data that are not accessible to those who are not authorized in the controlled area. Exploiting this vulnerability could allow a hacker to access arbitrary data...
The vulnerability in the web interface of the microprogramming software for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 allows a perpetrator to disclose protected information.
The vulnerability of the web-based management interface for Cisco IP Phones 6800, 7800, 8800, and Cisco Video Phone 8875 is related to the ability to bypass authentication due to a software bug. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
The vulnerability of the ljca_new_client_device() function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ljcanewclientdevice function in the drivers/usb/misc/usb-ljca.c file of the Linux kernel’s USB driver is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
PT-2024-33761 · Siadmin · Siadmin
Name of the Vulnerable Software and Affected Versions: SiAdmin version 1.1 Description: The issue allows SQL injection via the "/modul/mod kuliah/aksi kuliah.php" parameter in nim. This could allow a remote attacker to send a specially crafted SQL query to the system and retrieve all the...
PT-2024-13767 · Intel · Intel Fpga
Name of the Vulnerable Software and Affected Versions: IntelR FPGA products versions prior to 2.9.0 Description: The issue is related to an out of bounds write in the firmware of some IntelR FPGA products. This may allow escalation of privilege and information disclosure. Recommendations: For...
PT-2024-13631 · Intel +1 · Intel Onevpl +1
Name of the Vulnerable Software and Affected Versions: IntelR oneVPL versions prior to 23.3.5 Description: The issue is related to a NULL pointer dereference, which may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior t...
GHSA-3G43-XFRW-PV5M eZ Platform User data disclosure
In eZ Platform v2.3.x it is possible to bypass permission checks in a particular case. This means user data such as name and email but not passwords or password hashes can be read by unauthenticated users. This affects only v2.3.x. If you use v2.2.x or older you are not affected. To install, use...
eZ Platform User data disclosure
In eZ Platform v2.3.x it is possible to bypass permission checks in a particular case. This means user data such as name and email but not passwords or password hashes can be read by unauthenticated users. This affects only v2.3.x. If you use v2.2.x or older you are not affected. To install, use...
The vulnerability of the JIT component in the Mozilla Firefox browser allows a hacker to disclose protected information.
The vulnerability of the JIT component in the Mozilla Firefox browser is related to reading beyond the memory limit when processing substring comparisons. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...
PT-2024-28638 · Opentext · Opentext Imanager
Name of the Vulnerable Software and Affected Versions: OpenText iManager version 3.2.6.0200 Description: A Server Side Request Forgery vulnerability has been discovered, which could lead to sensitive information disclosure by directory traversal. Recommendations: For OpenText iManager version...
The vulnerability of the __ip6_tnl_rcv() function in the net/ipv6/ip6_tunnel.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to disclose sensitive information or cause service failures.
The vulnerability of the ip6tnlrcv function in the net/ipv6/ip6tunnel.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...
AZL-40520 CVE-2024-27282 affecting package ruby for versions less than 3.3.3-1
An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings. The fixed versions are 3.0.7, 3.1.5, 3.2.4, and 3.3.1...