17506 matches found
PT-2024-14792
Name of the Vulnerable Software and Affected Versions Honeywell C300 affected versions not specified Description The issue is related to an analysis feature that allows extracting more memory over the network than required by the function, leading to an information leak. Recommendations Update to...
CVE-2023-5392: Debug Messages Revealing Unnecessary Information
C300 information leak due to an analysis feature which allows extracting more memory over the network than required by the function. Honeywell recommends updating to the most recent version of the product. See Honeywell Security Notification for recommendations on upgrading and versioning...
CVE-2024-31464
XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it'...
CVE-2024-31464 XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted
XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it'...
AnythingLLM 跨站脚本漏洞
AnythingLLM is a document chatbot that meets business requirements. A cross-site scripting vulnerability exists in AnythingLLM that stems from a stored cross-site scripting XSS vulnerability in the chat functionality...
PT-2024-19565 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.7 through 16.8.6 GitLab CE/EE versions 16.9 through 16.9.3 GitLab CE/EE versions 16.10 through 16.10.1 Description: An issue has been discovered in GitLab CE/EE, where using the autocomplete for issues references...
CVE-2024-31464: Exposure of Sensitive Information to an Unauthorized Actor
XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to access the hash of a password by using the diff feature of the history whenever the object storing the password is deleted. Using that vulnerability it'...
CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability...
CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability...
CVE-2024-29061
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-29062
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28921
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28922
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28923
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28921
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28924
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28919
Secure Boot Security Feature Bypass Vulnerability...
CVE-2024-28920
Secure Boot Security Feature Bypass Vulnerability...