721 matches found
CVE-2023-4828
An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...
Input validation
An improper check for an exceptional condition in the Insider Threat Management ITM Server could be used by an attacker to change the server's configuration of any already-registered agent so that the agent sends all future communications to an attacker-chosen URL. This could result in disclosure...
CVE-2023-39073
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request...
PT-2023-28264 · Foxit · Foxit Pdf Reader
Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this issue, where the...
PowerShield SNMP Web Pro Security Vulnerability
PowerShield SNMP Web Pro is a PowerShield for monitoring and managing multiple UPSs in a networked environment. A security vulnerability exists in PowerShield SNMP Web Pro version v.1.1 that originated from a vulnerability that allows a remote attacker to execute arbitrary code and obtain sensiti...
CVE-2023-41747
Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager Windows before build 6.2.23089.203...
Acronis Agent 安全漏洞
Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that stems from the disclosure of sensitive information due to unauthorized...
Lavalite CMS Security Vulnerability
Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...
Lavalite CMS Security Vulnerability
Lavalite CMS is an open source PHP-based content management system CMS. A security vulnerability exists in LavaLite CMS version v 9.0.0, which stems from an easy sensitive data disclosure...
Video Conferencing with Zoom < 4.3.0 - Sensitive Data Disclosure
Description The plugin hardcodes its encryption key, which could allow unauthenticated attackers to decrypt the meeting id and password via the vczapiencryptdecrypt function...
Dell EMC PowerStore 日志信息泄露漏洞
Dell EMC PowerStore is a storage device from Dell USA. A log information disclosure vulnerability exists in Dell EMC PowerStore versions prior to 3.5.0.1, which originates from the insertion of sensitive information into a log file, and can be exploited by a malicious, high-privileged user to cau...
The vulnerability of the seg6genl_sethmac function in the Linux operating system allows a hacker to disclose sensitive information that is protected by this function.
The vulnerability of the seg6genlsethmac function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2023-29315 [FG-VD-23-008] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VI Notification
Adobe InDesign versions ID18.3 and earlier and ID17.4.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...
GHSA-JM79-9PM4-VRW9 Decidim vulnerable to sensitive data disclosure
Note: added the actual report as a comment. Summary Decidim, a platform for digital citizen participation, uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default, this library allows filtering on all data attributes and associations...
CVE-2023-34090
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
Design/Logic Flaw
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090 Decidim vulnerable to sensitive data disclosure
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090 Decidim vulnerable to sensitive data disclosure
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. Decidim uses a third-party library named Ransack for filtering certain database collections e.g., public meetings. By default,...
CVE-2023-34090
Summary: Decidim prior to 0.27.3 is affected by a data disclosure issue due to the Ransack filtering default behavior allowing all data attributes/associations to be queried, enabling an unauthenticated remote attacker to exfiltrate non-public data from the underlying database. Root cause: Miscon...
PT-2023-24663 · Ransack +2 · Ransack +2
Name of the Vulnerable Software and Affected Versions: Decidim versions prior to 0.27.3 Description: Decidim, a participatory democracy framework written in Ruby on Rails, uses a third-party library named Ransack for filtering certain database collections. By default, this library allows filterin...