The vulnerability of the SAE implementation for secure Wi-Fi access control software, WPA Supplicant, arises from information disclosure due to incompatibility. This allows attackers to expose the protected information.

The vulnerability of the SAE implementation for the Wi-Fi Protected Access Point’s WPA Supplicant is related to the disclosure of information due to incompatibility. This vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the EAP-pwd client implementation for Wi-Fi WPA Supplicant allows information disclosure due to incompatibility, enabling attackers to expose sensitive information.

The vulnerability of the EAP-pwd client implementation for Wi-Fi WPA Supplicant is related to the disclosure of information due to incompatibility. This vulnerability allows a malicious actor to disclose the protected information remotely...

UBUNTU-CVE-2022-3734

DISPUTED A vulnerability was found in a port or fork of Redis. It has been declared as critical. This vulnerability affects unknown code in the library C:/Program Files/Redis/dbghelp.dll. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has bee...

CVE-2022-20401

In SAEMMRetrievEPLMNList of SAEMMContextManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure post-authentication with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-21549

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.3.1; Oracle GraalVM Enterprise Edition: 21.3.2 and 22.1.0. Easily exploitable vulnerability allows unauthenticated...

The vulnerability of the CI/CD GitLab Runner application, related to information disclosure, allows a hacker to expose the protected information.

The vulnerability of the CI/CD GitLab Runner application relates to the exposure of sensitive information. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

PT-2022-21862 · Ca · Ca Automic Automation

Name of the Vulnerable Software and Affected Versions: CA Automic Automation versions 12.2 through 12.3 Description: The issue is related to insecure memory handling in the Automic agent, which could allow a remote attacker to potentially access sensitive data. Recommendations: For CA Automic...

CVE-2021-44098

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expenseaction.php. This allows a remote attacker to compromise Application SQL database...

The vulnerability of the Jenkins HashiCorp Vault’s software for storing API keys, tokens, and passwords arises from a flaw in its data protection mechanism. This flaw allows attackers to disclose the protected information.

The vulnerability of the Jenkins HashiCorp Vault’s software for storing API keys, tokens, and passwords is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to expose the protected information...

CVE-2021-44262

A vulnerability is in the 'MNUtop.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to insufficient validation of incoming requests, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute an SSRF attack by sending specially crafted requests...

The vulnerability in the web interface of the Cisco Umbrella security cloud service allows a attacker to obtain the email addresses of system users.

The vulnerability of the web interface of the Cisco Umbrella security cloud service relates to the disclosure of information in error messages. Exploiting this vulnerability can allow a malicious actor to obtain the email addresses of system users remotely...

The vulnerability of the import function implementation (/wp-admin/tools.php?page=rsvpmaker_export_screen) of the RSVPMaker plugin for WordPress content management system allows a hacker to perform an SSRF attack.

The vulnerability of the import function implementation /wp-admin/tools.php?page=rsvpmakerexportscreen of the RSVPMaker plugin for WordPress’s content management system is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to perfo...

Synology DiskStation Manager 信息泄露漏洞

DiskStation Manager DSM is an operating system that runs on all Synology NAS and can be operated through an intuitive web interface. An information disclosure vulnerability exists in the webapi component of Synology DiskStation Manager prior to version 6.2.3-25426-3. A remote attacker can exploit...

CVE-2021-34203

D-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 dir-2640-us, when setting PPPoE, will start quagga process in the way of whole network monitoring, and this function uses the original default password and port. An attacker can easily use telnet to log in, modify...

The vulnerability of the Apache Tomcat application server, related to deficiencies in HTTP request processing, allows attackers to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the Apache Tomcat application server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely HTTP Request Smuggling attack...

CVE-2021-26703

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...

CVE-2020-26525

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. This allows forcing the database and server to initiate remote connections to third party DNS servers...

Google Android Information Disclosure Vulnerability (CNVD-2020-54307)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Android version 11, which stems from a possible residual data leak of audio metadata from Bluetooth AVRCP. An attacker could exploit the...

The vulnerability of the Console component of the Oracle WebLogic Server application server allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Console component of the Oracle WebLogic Server application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized access to protected information...