The vulnerability of the NPM packet manager’s vm2 library, related to the disclosure of information in the erroneous data area, allows an intruder to gain unauthorized access to the protected information.

The vulnerability of the NPM packet manager’s library vm2 is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a intruder to access confidential data.

The vulnerability of the Sandboxing component in Firefox web browsers, Firefox ESR, and the email client Thunderbird relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

The vulnerability of the Apache HTTP Server’s web server, related to the disclosure of information in the erroneous data area, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the Apache HTTP Server is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the Open WebUI web interface relates to the disclosure of information in the erroneous data area, allowing an intruder to obtain unauthorized access to the protected information.

The vulnerability of the Open WebUI artificial intelligence-based web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260709-73-0012

The vulnerability in MediaWiki relates to the disclosure of information in erroneous data fields. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administrative tool allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of the Cisco Smart Software Manager On-Prem administrative interface web interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

The vulnerability of the FileLoader class in the Python programming language interpreter (CPython) allows a attacker to compromise the integrity of the protected information.

The vulnerability of the FileLoader class in the CPython interpreter relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from erroneous data leading to an infinite loop...

The vulnerability of the filter.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the filter.c component in the Linux operating system’s kernel is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the software for energy monitoring solutions like EcoStruxure Power Monitoring Expert and Power Operation lies in the ability to disclose information in unauthorized areas of the data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the ability to disclose information in the erroneous data range. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

BIT-PHP-MIN-2024-8925 Erroneous parsing of multipart form data

In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to...

The vulnerability of the Intel Alias Checking Trusted Module (Intel ACTM), a microprogramming software component for Intel 4th Generation and 5th Generation processors, allows attackers to exploit it to increase their privileges.

The vulnerability of the Intel Alias Checking Trusted Module Intel ACTM, a microprogramming software component of Intel’s 4th and 5th generation processors, relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow attackers to enhance their...

ROS-20240918-02

A vulnerability in the WebKitGTK web page display module is related to disclosure of information in an erroneous data area of data. Exploitation of the vulnerability allows an attacker acting remotely to gain access to the sensitive data...

The vulnerability of the `filter_var` function in the PHP programming language allows attackers to replace URLs with erroneous data.

The vulnerability of the filtervar function in the PHP programming language is related to insufficient validation of data authenticity. Exploiting this vulnerability could allow an attacker to substitute URLs with erroneous data remotely...

The vulnerability of the IPv6 protocol implementation in the software environment for creating containerized systems called Moby allows a attacker to obtain confidential information.

The vulnerability of the IPv6 protocol implementation for the Moby container isolation system is related to the disclosure of information in the erroneous data field. Exploiting this vulnerability can allow an attacker to obtain confidential information...

The vulnerability in the avatar loading function of the OTRS application allows a violator to execute arbitrary code.

The vulnerability of the avatar loading function in the OTRS application relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos operating system, which allows a hacker to gain access to confidential data

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS allows a hacker to disable the Bluetooth function.

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS is related to the disclosure of information in an erroneous data field. Exploiting this vulnerability could allow a remote attacker to cause the Bluetooth function to become unavailable...

The vulnerability of the WebExtension component in the Firefox web browser, related to the disclosure of information in the erroneous data area, allows attackers to gain access to confidential data.

The vulnerability of the WebExtension component in the Firefox web browser is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data...

EulerOS Virtualization 2.11.0 : curl (EulerOS-SA-2023-2118)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when...