The vulnerability of Intel Active Management Technology’s microprogramming software lies in insufficient validation of input data. This allows attackers to disclose sensitive information or cause service failures.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

CVE-2019-7004

A Cross-Site Scripting XSS vulnerability in the WebUI component of IP Office Application Server could allow unauthorized code execution and potentially disclose sensitive information. All product versions 11.x are affected. Product versions prior to 11.0, including unsupported versions, were not...

envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure

A flaw was found in envoy. A malformed request header may cause route matchers or access controls to be bypassed, resulting in escalation of privileges or information disclosure. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Intel Baseboard Management Controller Heap Corruption Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A heap corruption vulnerability exists in Intel BMC, which can be exploited by attackers to cause information disclosure, elevation of privilege, or denial of service...

PT-2019-5580 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: Intel Processors affected versions not specified Description: The issue is related to insufficient checking of exceptional states in Intel processor microcode, potentially allowing an authenticated user to partially escalate privileges, cause...

Google Chrome cookies information disclosure vulnerability

Google Chrome is a web browser from Google, Inc. cookies is one of the cookie plug-ins. An information disclosure vulnerability exists in Google Chrome cookies, which stems from the program's failure to fully implement policies. The vulnerability can be exploited to disclose cross-origin data via...

Intel Baseboard Management Controller Code Issue Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A code issue vulnerability exists in Intel BMC, which can be exploited by an attacker to disclose information and/or cause a denial of service...

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to disclose protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC relates to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Extension.dll library in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. This vulnerability allows attackers to exploit their privileges, cause service failures, and disclose sensitive information.

The vulnerability of the Extension.dll library used in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges, cause service interruptions, and expose sensitive information...

The vulnerability of the Baseboard Management Controller, a controller for remote control of a computer, arises from operations that go beyond the buffer in memory. This allows attackers to disclose sensitive information, enhance their privileges, or cause system failures.

The vulnerability of the Baseboard Management Controller for remote control involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information, enhance their privileges, or cause service failures...

CVE-2019-2229

In updateWidget of BaseWidgetProvider.java, there is a possible leak of user data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8....

PT-2020-3040

Name of the Vulnerable Software and Affected Versions Ansible versions 2.7.x through 2.7.14 Ansible versions 2.8.x through 2.8.6 Ansible versions 2.9.x through 2.9.0 Description The issue is related to the absence of consideration for the no log flag in Ansible's system management configuration...

SAP Treasury and Risk Management Authorization Bypass Vulnerability

SAP Treasury and Risk Management TRM is a finance and risk management solution from SAP. The product is primarily used to analyze and optimize business processes in the area of corporate finance. An authorization bypass vulnerability exists in SAP TRM, which can be exploited by an attacker to gai...

PT-2019-5284

Name of the Vulnerable Software and Affected Versions Ansible versions prior to 2.8.6 Ansible versions prior to 2.7.14 Ansible versions prior to 2.6.20 Description The issue is related to insufficient input validation in the Ansible configuration management system. This could allow a remote...

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose...

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME) and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data. This allows attackers to disclose sensitive information, escalate their privileges, or cause service interruptions.

The vulnerability of Microprogrammed Software-Based Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information, enhance their...

Apache NiFi Code Issue Vulnerability

Apache NiFi is a data processing and distribution system of the American Apache Apache Software Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A code issue vulnerability exists in the XMLFileLookupService in Apache NiFi versions 1.3.0...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...

Ansible: Splunk and Sumologic callback plugins leak sensitive data in logs

A data disclosure flaw was found in Ansible when using the Splunk and Sumologic modules, as they are not respecting when the flag nolog is enabled. This flaw can disclose and collect sensitive data from the system and expose it to an attacker...