CVE-2021-0078

CVE-2021-0078 involves improper input validation in software for Intel® PROSet/Wireless WiFi and Killer™ WiFi on Windows 10. The Red Hat and Intel advisories corroborate that an unauthenticated user could potentially cause denial of service or information disclosure via adjacent access. The vulne...

CVE-2021-38978

IBM Tivoli Key Lifecycle Manager (TKLM) and related IBM Security Guardium Key Lifecycle Manager versions (3.0–4.1) are affected by CVE-2021-38978 due to failure to properly enable HTTP Strict Transport Security. This allows a remote attacker to potentially obtain sensitive information via MITM. A...

CVE-2021-41371

CVE-2021-41371 is a Windows RDP information-disclosure vulnerability affecting the RDP implementation on Windows client/server versions from Windows 7 through Windows 11 and Windows Server 2008–2019. Public reporting indicates the flaw enables an attacker with local access to view the RDP passwor...

CVE-2020-24000

SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php...

CVE-2021-1118

CVE-2021-1118 affects NVIDIA vGPU software (Virtual GPU Manager) and its vGPU plugin. The vulnerability could allow a guest OS to perform privileged operations, potentially leading to information disclosure, data tampering, privilege escalation, and denial of service. Public documentation in the ...

kids.harven.info Cross Site Scripting vulnerability OBB-2216102

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Heap overflow

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391...

CVE-2021-0413

This CVE refers to the MediaTek flv extractor with an out-of-bounds read caused by a missing bounds check. The result is local information disclosure without requiring user interaction. No exploitation details are provided beyond this disclosure risk. A patch/ID is listed as ALPS05561379 (Issue I...

CVE-2021-0413

In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561379; Issue ID: ALPS05561379...

CVE-2020-23038

CVE-2020-23038 affects Swift File Transfer Mobile v1.1.2 and earlier. A path traversal/info-disclosure vulnerability exists in the path parameter, triggered by an error caused by including non-existent path environment variables. The connected sources corroborate that an unauthorized attacker cou...

CVE-2021-38662

Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.

Zammad Information Disclosure Vulnerability (CNVD-2021-81953)

Zammad is an open source web-based help desk/customer support system. versions prior to Zammad 4.1.1 are vulnerable to information disclosure. An attacker could exploit the vulnerability to obtain sensitive information via the REST API...

CVE-2021-0682

CVE-2021-0682 affects Android via a permissions check gap in NotificationManagerService.java (sendAccessibilityEvent), enabling local information disclosure of notifications. Affected: Android 8.1, 9, 10, 11. Exploitation: local, requires no user interaction, per description; no mitigation detail...

CVE-2021-39891

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure...

Information disclosure

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure...

CVE-2021-39891

In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure...

CVE-2021-39891

Removed by vendor...

CVE-2021-39891

CVE-2021-39891 affects GitLab CE/EE from version 8.0 onward, where tokens created during an admin’s impersonation of a user are not cleared at the end of impersonation. This can lead to exposure of sensitive information if impersonation tokens persist. The available documents consistently describ...

Information disclosure

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information...

CVE-2021-22012

The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information...