NPM vm2 Information Disclosure

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Sandboxing Confidential Data Access

The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the email client Thunderbird relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

Apache HTTP Server Information Disclosure

The vulnerability of the Apache HTTP Server is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Open WebUI Information Disclosure

The vulnerability of the Open WebUI artificial intelligence-based web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0012

The vulnerability in MediaWiki relates to the disclosure of information in erroneous data fields. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Root Privileges

The vulnerability of the Cisco Smart Software Manager On-Prem administrative interface web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

Python FileLoader Data Compromise

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from erroneous data leading to an infinite loop...

Linux kernel filter.c DoS

The vulnerability of the filter.c component in the Linux operating system’s kernel is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to cause a service failure...

EcoStruxure Power Monitoring Expert Information Disclosure

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

BIT-PHP-MIN-2024-8925 Erroneous parsing of multipart form data

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to...

Intel Alias Checking Trusted Module Privilege Escalation

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow attackers to enhance their...

ROS-20240918-02

A vulnerability in the WebKitGTK web page display module is related to disclosure of information in an erroneous data area of data. Exploitation of the vulnerability allows an attacker acting remotely to gain access to the sensitive data...

PHP filter_var URL Manipulation

The vulnerability of the filtervar function in the PHP programming language is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to substitute URLs with erroneous data remotely...

Moby IPv6 Information Disclosure

The vulnerability of the IPv6 protocol implementation for the Moby container isolation system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability can allow an attacker to obtain confidential information...

OTRS Avatar Loading Code Execution

The vulnerability of the avatar loading function in the OTRS application relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

Juniper Networks’ Junos Packet Forwarding Engine Confidential Data Access

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

EMUI Bluetooth Disable

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS is related to the disclosure of information in an erroneous data field. Exploiting this vulnerability could allow a remote attacker to cause the Bluetooth function to become unavailable...

WebExtension Information Disclosure

The vulnerability of the WebExtension component in the Firefox web browser is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2023-2118)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when...