7707 matches found
The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.
The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.
The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the idxd component in the Linux operating system’s kernel allows a hacker to disclose confidential information.
The vulnerability of the idxd component in the Linux operating system’s kernel is related to the re-writing of the SWERR and OVERFLOW bits. Exploiting this vulnerability can allow an attacker to disclose confidential information...
The vulnerability of the DCH-compatible Thunderbolt driver, related to insufficient validation of input data, allows a hacker to exploit the system to disclose protected information.
The vulnerability of the DCH-compatible Thunderbolt driver is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the software’s user interface for running large language models (LLMs) like GPT NVIDIA ChatRTX for Windows allows a hacker to execute arbitrary code, cause service failures, or disclose sensitive information.
The vulnerability of the user interface of the software for running large language models LLM GPT NVIDIA ChatRTX for Windows exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, cause service...
The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.
The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...
PT-2024-4522 · FFmpeg +4 · Ffmpeg +4
Name of the Vulnerable Software and Affected Versions: Ffmpeg version v.n6.1-3-g466799d4f5 Description: The issue is related to a Buffer Overflow in the av samples set silence function, located in the libavutil/samplefmt.c component of the Ffmpeg library. This allows a local attacker to potential...
SolarWinds Platform 跨站脚本漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A cross-site scripting vulnerability exists in SolarWinds Platform that stems from allowing the execution of malicious scripts that can lead to data disclosure...
CVE-2024-30987
Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters...
PT-2024-6877
Name of the Vulnerable Software and Affected Versions Ivanti Avalanche versions prior to 6.4.5 Description A server-side request forgery issue exists in the validateAMCWSConnection function of Ivanti Avalanche. This flaw allows a remote, unauthenticated attacker to disclose sensitive information ...
Peplink Smart Reader 访问控制错误漏洞
Peplink Smart Reader is a smart reader from Peplink Inc. It is used for employee time and attendance. An access control error vulnerability exists in Peplink Smart Reader v1.2.0, which stems from the presence of an information disclosure vulnerability that could lead to the disclosure of sensitiv...
IBM WebSphere Application Server 和 IBM WebSphere Application Server Liberty 代码问题漏洞
IBM WebSphere Application Server WAS and IBM WebSphere Application Server Liberty are both products of International Business Machines IBM.IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for...
PT-2024-4913 · Oracle +1 · Virtualbox +1
Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.16 Description: The issue is related to the use of memory after it has been freed, which can allow an attacker to disclose protected information. A low-privileged attacker with logon access to the...
PT-2024-4903 · Oracle · Peoplesoft Enterprise Peopletools
Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.61 Description: The issue exists due to insufficient input validation in the Security component of Oracle PeopleSoft Enterprise PeopleTools. Exploitation of this issue may allow a remo...
The vulnerability of the Azure AI Search search engine, related to the use of pre-installed credentials, allows a perpetrator to disclose protected information.
The vulnerability of the Azure AI Search search engine is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...
CVE-2024-28558
SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...
CVE-2024-29218
Out-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier, KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file...
Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.
...
The vulnerability of the UEFI loader’s shim, related to reading beyond the field, allows an attacker to disclose protected information.
The vulnerability of the UEFI loader “shim” is related to errors in reading data beyond the boundary, when attempting to verify the SBAT information. Exploiting this vulnerability can allow an attacker to disclose the protected information...
