14536 matches found
CVE-2022-47328
CVE-2022-47328 concerns a vulnerability in a WLAN driver (Qualcomm chip family in several reports) where a missing permission check enables potential local information disclosure. The Public documents consistently describe the issue as a local information disclosure due to insufficient privilege ...
CVE-2021-31576
CVE-2021-31576 affects Boa and involves a missing permission check that enables remote information disclosure to a proximal attacker with no additional execution privileges required. Descriptions across multiple sources (NVD, Red Hat, PRION, CVE listings) consistently report: vulnerability arises...
GNU Binutils DoS
The vulnerability of the GNU Binutils development tool is related to a memory access error. Exploiting this vulnerability could allow an attacker to perform a type of attack known as a “Denial-of-Service” DoS attack while analyzing ELF files containing corrupted version information about symbols...
pius-info.de Cross Site Scripting vulnerability OBB-3179184
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
frauen-info-netz.de Cross Site Scripting vulnerability OBB-3179116
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-0659
The CVE-2023-0659 entry documents a critical information disclosure vulnerability in BDCOM 1704-WGL, specifically affecting the Backup File Handler component. The issue concerns an unknown portion of the file /param.file.tgz and is exploitable remotely, leading to leakage of sensitive information...
CVE-2022-27538
Summary of CVE-2022-27538 (HP BIOS TOCTOU): A TOCTOU vulnerability identified in the BIOS of certain HP PC products could allow arbitrary code execution, denial of service, and information disclosure. The impact and affected component are stated as BIOS-level for HP PCs, with a local attack vecto...
CVE-2022-4255
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
Design/Logic Flaw
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
CVE-2022-4255
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
AZL-13114 CVE-2022-4285 affecting package binutils for versions less than 2.37-5
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599...
MTN Group: PHP info page disclosure in ██████████
The PHP info page was disclosed, which provided detailed information about the system and PHP configuration, including the exact PHP version, operating system, and internal IP addresses...
CVE-2022-4255
Removed by vendor...
CVE-2022-4255
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
CVE-2022-4255
CVE-2022-4255 affects GitLab EE: information leakage via webhook payload exposes user email IDs for all GitLab EE versions 13.7–15.4.5, 15.5–15.5.4, and 15.6–15.6.0. Root cause is an info leak in webhook payloads; affected versions before fixes. Remediation: upgrade to GitLab EE 15.4.6 or later, ...
CVE-2022-4255: Undefined Security Weakness
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
Ubuntu: Security Advisory (USN-5216-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-4255
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
CVE-2022-42493
Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is...