18 matches found
The vulnerability of the Windows Recovery Environment Agent component on Microsoft Windows operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Windows Recovery Environment Agent component in Microsoft Windows operating systems is related to improper cross-border deletion of critical data. Exploiting this vulnerability can allow attackers to disclose protected information...
Credentials are not deleted from Acronis Agent after plan revocation
...
EUVD-2023-33890
Malicious code in bioql PyPI...
CVE-2023-2400
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...
OpenStack improperly deletes access rules
A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials...
CVE-2023-2400
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...
CVE-2023-2400
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...
CVE-2023-2400
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...
CVE-2023-2400
Summary: CVE-2023-2400 affects Devolutions Server 2023.1.8 and earlier. The vulnerability stems from an improper deletion of resources in the user management feature, which allows an administrator to view the vaults of deleted users via database access. Affected software/area: Devolutions Server,...
PT-2023-19349 · Devolutions · Devolutions Server
Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2023.1.8 and earlier Description: The issue is related to the improper deletion of resources in the user management feature, allowing an administrator to view users' vaults of deleted users via database access...
CVE-2023-2400: Incomplete Cleanup
Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of deleted users via database access...
PT-2022-31867
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the net/mlx5 component in the Linux Kernel, where the Flow Steering Table Entry FTE is not properly deleted when there are no rules attached to it. This is an automated ID...
Intel Processors Information Disclosure Vulnerability (CNVD-2020-68828)
Intel Core Processors is an Intel Core family of central processing units CPUs from the American company Intel. A security vulnerability exists in Intel Processors that originates from improper deletion of sensitive information prior to storage or transfer could allow authenticated users to...
CVE-2015-3280
OpenStack Compute nova before 2014.2.4 juno and 2015.1.x before 2015.1.2 kilo does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service disk consumption by deleting instances while in the resize state...
The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information
The vulnerability of the “Secure Empty Trash” extension of the Finder component in the Mac OS X operating system is related to improper file deletion. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to protected information by analyzing storage media...
CVE-2015-5901
The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a flash drive...
CVE-2013-2742: Undefined Security Weakness
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote attackers to obtain access via subsequent requests to this script...
CVE-2002-0096
The CVE-2002-0096 entry concerns Geeklog 1.3. The installation process creates an extra group_assignments record that is not deleted, causing the first newly created user to be added to the GroupAdmin and UserAdmin groups and potentially receive unintended administrative privileges. Connected sou...