7714 matches found
PT-2024-1099
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in the representation of information by the user interface of the Windows operating system, specifically in the Themes component. This can allow a remote attack...
PT-2024-1125 · Microsoft · Windows Core Messaging +1
Name of the Vulnerable Software and Affected Versions: Windows CoreMessaging affected versions not specified Description: The issue is related to insufficient access control in the CoreMessaging service of the Windows operating system. Exploitation of this issue may allow an attacker to disclose...
CVE-2024-22216
In default installations of Microchip maxView Storage Manager for Adaptec Smart Storage Controllers where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 exce...
Profile Builder < 3.10.8 - Contributor+ User Metadata Disclosure
Description The plugin is vulnerable to unauthorized access of data due to a missing capability check on the wppbtoolboxusermetahandler function allowing authenticated attackers, with contributor-level access and above, to expose sensitive information within user metadata...
CVE-2023-6540
A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information...
Lenovo Browser Code Injection Vulnerability
Lenovo Browser is a browser from the Chinese company Lenovo. It is used to locate, retrieve and display content on the World Wide Web. A code injection vulnerability exists in Lenovo Browser Mobile V9.1.3.1 and earlier versions, Lenovo Browser HD Apps for Android V2.1.4.1 and earlier versions,...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can trigger an integer overflow which may lead to a disclosure of sensitive information...
AZL-45348 CVE-2023-26159 affecting package js-jquery 3.5.0-4
Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by the url.parse function. When new URL throws an error, it can be manipulated to misinterpret the hostname. An attacker could exploit this weakness to redirect...
CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
The PayHere Payment Gateway WordPress plugin before 2.2.12 automatically creates publicly-accessible log files containing sensitive information when transactions occur...
CVE-2023-41542
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component...
verify-changed-files Input Verification Error Vulnerability
changed-files is used to track the relative paths returned from the project root for all changed files and directories associated with the target branch, previous commits, or the last remote commit. An input validation error vulnerability exists in versions prior to verify-changed-files 17.0.0,...
GHSA-XHVV-3JWW-C487 ActiveAdmin CSV Injection leading to sensitive information disclosure
Impact In ActiveAdmin versions prior to 3.2.0, maliciously crafted spreadsheet formulas could be uploaded as part of admin data that, when exported to a CSV file and the imported to a spreadsheet program like libreoffice, could lead to remote code execution and private data exfiltration. The...
CVE-2023-7163
A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...
The vulnerability of the nsWindow::PickerOpen(void) method allows attackers to compromise the confidentiality, integrity, and accessibility of protected information on browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird.
The vulnerability of the nsWindow::PickerOpenvoid method in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the Bluetooth LE component of the microprogramming software for biometric locks, Ultraloq UL3 2nd Gen Smart Lock, allows a intruder to disclose the protected information.
The vulnerability of the Bluetooth LE component of the microprogrammed biometric lock Ultraloq UL3 2nd Gen Smart Lock is related to session management errors. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...
