CVE-2022-20096

The CVE-2022-20096 entry concerns MediaTek devices’ camera component (affecting multiple chips such as MT6765/6768/6769/8183/8185/8385/8666/8667/8768/8786/8788/8789).根 The root cause is uninitialized data in the camera path, enabling local information disclosure. Reported impact: potential local ...

Cisco Adaptive Security Appliance和Firepower Threat Defense信息泄露漏洞

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...

CVE-2021-45839

CVE-2021-45839 affects TerraMaster TOS 4.2.x on F4-210/F2-210. The vulnerability enables disclosure of sensitive data by issuing a request to /module/api.php?mobile/webNasIPS, exposing the first administrator hash and other details (MAC address, internal IP). Connected documents describe an explo...

CVE-2011-4917

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat...

April 2022 Patch Tuesday: Microsoft Releases 145 Vulnerabilities with 10 Critical; Adobe Releases 4 Advisories, 78 Vulnerabilities with 51 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 145 vulnerabilities, including 17 Microsoft Edge vulnerabilities, in the April 2022 update, with ten 10 classified as Critical as they allow Remote Code Execution RCE. This month’s Patch Tuesday release includes fixes for two 2 zero-day...

Information disclosure

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability...

Out-of-bounds

In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617...

CVE-2021-38930

The CVE-2021-38930 issue affects IBM System Storage DS8000 Management Console (HMC) for R8.5 (88.5x.x.x), R9.1 (89.1x.0.0), and R9.2 (89.2x.0.0). A remote attacker could obtain sensitive information via unpublished URLs. IBM’s bulletin lists CVSS ~5.3 base (3.0) with a network attack vector, and ...

IBM Sterling Partner Engagement Manager信息泄露漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from IBM Corporation. IBM Sterling Partner Engagement Manager version 6.2.0 is vulnerable to an information disclosure vulnerability that could be exploited by a remote, authenticated attacker to obtain sensitive information ...

CVE-2022-23698

The CVE-2022-23698 issue affects HPE OneView prior to version 6.6. It is a remote, unauthenticated information-disclosure vulnerability in OneView (information leakage). The available sources state that HPE has provided a software update to resolve the vulnerability, with no exploitation details ...

CVE-2021-39740

In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID...

Input validation

In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-39781

CVE-2021-39781 affects Android 12L with a vulnerability in SmsController permitting information disclosure via a permissions bypass, enabling local escalation of privilege and SMS sending without extra privileges. The issue is documented in Android 12L security release notes; mitigation is provid...

CVE-2021-39757

CVE-2021-39757 affects Android 12L with a permission bypass in the PermissionController caused by unsafe PendingIntent, enabling local information disclosure. Exploitation requires low privileges and no user interaction, with potential access to sensitive data on the device as described in multip...

CVE-2021-39739

CVE-2021-39739 affects Android 12L and is a vulnerability in the ArrayMap component where SMS contents could be leaked via log information disclosure. The root cause is information disclosure in ArrayMap that enables a local information leak with neither user interaction nor remote access require...

CVE-2022-24291

CVE-2022-24291 affects Certain HP Print devices, enabling potential information disclosure, denial of service, or remote code execution. Public sources in the connected set confirm HP printer families and models are affected and note a firmware remediation path. HP’s advisory HPSBPI03781 document...

CVE-2021-39792

In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Nextcloud Information Disclosure Vulnerability (CNVD-2022-20155)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication applications platform from Nextcloud Germany.A security vulnerability exists in Nextcloud Server, which is due to an issue with the Nextcloud Text application which is provided with Nextcloud Server by...

VulnCheck KEV: CVE-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE...

CVE-2022-24061

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...