14162 matches found
BIT-GITLAB-2021-39891
In all versions of GitLab CE/EE since version 8.0, access tokens created as part of admin's impersonation of a user are not cleared at the end of impersonation which may lead to unnecessary sensitive info disclosure...
BIT-GITLAB-2022-4255
An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...
BIT-SUITECRM-2021-41595
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the filename parameter of the Step3 import functionality...
BIT-SUITECRM-2021-41596
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality...
BIT-APACHE-2020-11984
Apache HTTP server 2.4.32 to 2.4.44 modproxyuwsgi info disclosure and possible RCE...
PT-2024-8431
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cpumap component of the Linux kernel, where the xdp rxq info struct is not properly initialized before running an XDP program. This leads to random values bei...
UBUNTU-CVE-2021-47097
In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantechchangereportid The array param in elantechchangereportid must be at least 3 bytes, because elantechreadregparams is calling ps2command with PSMOUSECMDGETINFO, that is goi...
Code injection
Transient DOS while processing CAG info IE received from NW...
CVE-2023-33103 Improper Input Validation in Multi-Mode Call Processor
Transient DOS while processing CAG info IE received from NW...
CVE-2023-33103 Improper Input Validation in Multi-Mode Call Processor
Transient DOS while processing CAG info IE received from NW...
CVE-2023-33103
CVE-2023-33103 is described across multiple sources as a Transient Denial of Service issue in Qualcomm chipsets related to processing CAG information elements received from the NW. The connected documents indicate this CVE is associated with Qualcomm closed‑source components (notably listed in th...
CVE-2024-20030
A security vulnerability exists in MediaTek chips due to improper input validation within the da module . This flaw could lead to local information disclosure , which requires System execution privileges to exploit. The vulnerability does not require user interaction. While no specific affected v...
CVE-2024-20020
In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504...
CVE-2023-33103: Improper Input Validation
Transient DOS while processing CAG info IE received from NW...
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3377-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CutOut.Pro AI Tool Data Breach: Hacker Leak 20 Million User Info
By Waqas In an exclusive statement to Hackread.com, CutOut.Pro denied the breach and labeled the leak as a 'clear scam.' This is a post from HackRead.com Read the original post: CutOut.Pro AI Tool Data Breach: Hacker Leak 20 Million User Info...
CVE-2024-0978
The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's site privacy feature and view restricted page and post content...
CentOS 9 : nodejs-16.16.0-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the nodejs-16.16.0-1.el9 build changelog. - Versions of the npm CLI prior to 6.14.6 are vulnerable to an information exposure vulnerability through log files. The CLI supports URLs...
Security Bulletin: IBM Spectrum Symphony with urllib3 could allow a remote authenticated attacker to obtain sensitive information
Summary IBM Spectrum Symphony with urllib3 could allow a remote authenticated attacker to obtain sensitive information Vulnerability Details CVEID:CVE-2023-45803 DESCRIPTION: urllib3 could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw with not remove the...
