CVE-2022-37347

CVE-2022-37347 affects Trend Micro Security 2021/2022 (Consumer). It is an Out-Of-Bounds Read Information Disclosure vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash. Public sources in the connected docs confirm the issue and r...

CVE-2022-35709 Adobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability

Adobe Bridge version 12.0.2 and earlier and 11.1.3 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction i...

Information disclosure

Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2021-44470

CVE-2021-44470 affects Intel Connect M Android app prior to version 1.7.4. Root cause: incorrect default permissions that may allow an authenticated user to disclose information via local access. Impact: information disclosure on local access, no integrity/availability impact stated. Remediation:...

Information disclosure

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin are affected by an information disclosure vulnerability. Requests to an OpenSearch cluster configured with advanced access control features...

Information disclosure

In ContentService, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20320

CVE-2022-20320 affects Android 13 and involves the ActivityManager. The issue enables a local attacker to infer whether an app is installed without query permissions, via a side-channel information disclosure. The exploitation is described as requiring local access (no user interaction) and not n...

CVE-2022-20307

Summary (CVE-2022-20307) : In Android 13, AlarmManagerService allows a side-channel leakage that can reveal whether an app is installed without query permissions, enabling local information disclosure with no extra execution privileges and no user interaction. Affected : Android 13 (AlarmManagerS...

CVE-2022-20251

In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20242

In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Information disclosure

In USB Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure of installed packages with no additional execution privileges needed. User interaction is not...

CVE-2022-20272

In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

CVE-2022-20261

The CVE-2022-20261 entry concerns the Android LocationManager component. A missing permission check could allow an attacker to obtain location information, causing local information disclosure. Exploitation requires System privileges but not user interaction, with a local attack vector. Affected ...

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-30134

CVE-2022-30134 is documented as an Exchange Server vulnerability linked to August 2022 updates. Connected sources list affected products as Microsoft Exchange Server 2016 CU23, 2019 CU11/CU12, and 2019 CU12 variants, with the update KB5015322 describing it among vulnerabilities fixed in that roll...

AMD CPU Information Disclosure Vulnerability (AMD-SB-1038, Hertzbleed)

The AMD CPU on the remote host might be prone to an information disclosure vulnerability dubbed Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

RPCMS has information leakage vulnerability

RPCMS is a lightweight content management/blogging system based on PHP MYSQL.RPCMS has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2022-21770

CVE-2022-21770 concerns a vulnerability in the sound driver where a symlink following flaw can lead to local information disclosure, with System execution privileges needed. The NVD entry states an impact on confidentiality, integrity, and availability (C/I/A: Partial/Partial/Partial) and a local...

CVE-2022-21763

CVE-2022-21763 affects the telecom service component; due to a missing permission check, it can disclose local information without extra privileges. Exploitation requires no user interaction. A patch is listed (ALPS07044717/ALPS07044708) and updates are reflected in multiple sources (NVD, Red Hat...

CVE-2022-31599

CVE-2022-31599 affects NVIDIA DGX A100 SBIOS in Ofbd. A local privileged user can cause an uninitialized pointer access, potentially enabling code execution, privilege escalation, DoS, and information disclosure, with impact potentially extending to other components. NVIDIA’s bulletin lists firmw...