Lucene search
+L

75 matches found

Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•7 views

PT-2022-1985 · Microsoft · Windows Remote Desktop Protocol Client +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Remote Desktop Protocol Client affected versions not specified Description: The vulnerability is related to the Remote Desktop Protocol Client in Microsoft Windows and involves the disclosure of information in an error data...

6.4CVSS6.6AI score0.02437EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2022/01/25 12:00 a.m.•16 views

The vulnerability of the JDBC driver of the Kylin data processing platform allows a hacker to execute arbitrary code.

The vulnerability of the JDBC driver of the Kylin data processing platform is related to the disclosure of information in the error data area. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7AI score0.01948EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/25 12:00 a.m.•16 views

The vulnerability of the dictsort template pattern in the Django web framework allows a attacker to access confidential information.

The vulnerability of the dictsort template pattern in the Django web framework relates to the disclosure of information in the error data field. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain confidential system information...

5CVSS7.2AI score0.01839EPSS
SaveExploits0References9Affected Software4
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•11 views

PT-2021-6313 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

5.5CVSS5.9AI score0.00788EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•10 views

PT-2021-6326 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

5.5CVSS5.9AI score0.00788EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•9 views

PT-2021-6190 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to an information disclosure in the error data area of Microsoft Message Queuing MSMQ in the Microsoft Windows operating system. It may allow a...

7.8CVSS7.2AI score0.03167EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•8 views

PT-2021-5049

Name of the Vulnerable Software and Affected Versions VMware vRealize Operations Tenant App versions prior to 8.6 Description The issue is related to an Information Disclosure Vulnerability in the monitoring tool for virtual infrastructure. It is associated with the disclosure of information in a...

7.5CVSS0.01003EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2021/08/10 12:00 a.m.•19 views

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase the...

10CVSS8.5AI score0.9116EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2020/08/25 12:00 a.m.•18 views

PT-2021-6507 · Saltstack +2 · Saltstack Salt +2

Name of the Vulnerable Software and Affected Versions: SaltStack Salt versions prior to 3003.3 Description: The issue is related to information disclosure in the error data area of the Salt configuration management and remote execution system. Exploitation of this issue allows a remote attacker t...

9.8CVSS7.5AI score0.99585EPSS
SaveExploits14References167
Debian CVE
Debian CVE
•added 2019/07/15 5:27 p.m.•32 views

CVE-2019-1010294

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from previous Trusted Application. The component is: opteeos. The fixed version is: 3.4.0 and later...

7.5CVSS7.7AI score0.0142EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/04/04 12:00 a.m.•11 views

PT-2019-6172 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue is related to the exposure of sensitive information to unauthorized actors. It involves the IsNextToken function in the src/base/PdfToenizer.cpp component, which can be exploited by attackers to...

9.8CVSS6.9AI score0.02552EPSS
SaveExploits8References34
Prion
Prion
•added 2018/07/13 4:29 p.m.•47 views

Information disclosure

An issue has been found in libpng 1.6.34. It is a SEGV in the function pngfreedata in png.c, related to the recommended error handling for pngreadimage...

4.3CVSS7.5AI score0.03316EPSS
SaveExploits1References6Affected Software3
CNVD
CNVD
•added 2017/02/08 12:00 a.m.•14 views

IBM Security Access Manager Information Disclosure Vulnerability (CNVD-2017-01305)

IBM Security Access Manager is a security access manager from IBM USA. A security vulnerability exists in IBM Security Access Manager. An attacker could exploit the vulnerability by sending a specially crafted HTTP request to obtain sensitive information from an error message...

4CVSS6.3AI score0.01033EPSS
SaveExploits0References1
OSV
OSV
•added 2013/10/10 10:55 a.m.•13 views

CVE-2013-4345

Off-by-one error in the getprngbytes function in crypto/ansicprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic protection mechanisms via multiple requests for small amounts of data, leading to improper management of the state of the...

7AI score
SaveExploits0References18
zdt
zdt
•added 2010/08/09 12:00 a.m.•96 views

Linux Kernel <= 2.6.33.3 SCTP INIT Remote DoS

Exploit for linux platform in category dos / poc ============================================= Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1173 The sctpprocessunkparam function in net/sctp/smmakechunk.c in the Linux kernel 2.6.33.3 and...

7AI score0.21238EPSS
SaveExploits7
Rows per page
Query Builder