QNAP Systems Music Station Path Traversal Vulnerability

QNAP Systems Music Station is a music playback and management application from QNAP Systems. A path traversal vulnerability exists in QNAP Systems Music Station 5.3.22 and earlier versions that could allow an authenticated user to read the contents of an unexpected file and expose sensitive data...

IBM Jazz Foundation Security Vulnerability

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines IBM. A security vulnerability exists in IBM Jazz Foundation that stems from the potential to disclose sensitive version information to users that could be used to...

CVE-2023-45240

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35739...

CVE-2023-2306

Qognify NiceVision versions 3.1 and prior are vulnerable to exposing sensitive information using hard-coded credentials. With these credentials an attacker can retrieve information about the cameras, user information, and modify database records...

PT-2023-29132 · WordPress · Profilepress

Name of the Vulnerable Software and Affected Versions: ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content – ProfilePress versions n/a through 4.13.2 Description: The issue is related to the exposure of sensitive informati...

WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-40002 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 565c06f4723d Credits Dave Jong...

CVE-2023-5182

Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwords and possibly escalate their privilege...

Information disclosure

A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain passwords to candlepin's keystore and truststore, were found to be world readable...

WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure

Software WP Ultimate Exporter Type Plugin Vulnerable versions = 2.4.1 Fixed in 2.4.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-2487 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID b22ef0e23a4e Credits Jonas Höbenreic...

PT-2023-29121 · Google · Com.Android.Server.Telecom

Name of the Vulnerable Software and Affected Versions: com.android.server.telecom affected versions not specified Description: The issue is related to the Call management app patched by LG, which launches implicit intents that disclose sensitive data to all third-party apps installed on the same...

PT-2023-29120 · Google · Com.Android.Server.Telecom

Name of the Vulnerable Software and Affected Versions: com.android.server.telecom affected versions not specified Description: The issue is related to the Call management app patched by LG, which sends numerous LG-owned implicit broadcasts. These broadcasts disclose sensitive data, including call...

WordPress WP Job Openings Plugin <= 3.4.2 is vulnerable to Sensitive Data Exposure

Software WP Job Openings Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-4933 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 654671e3575f Credits Dmitrii Ignatyev Require...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A security...

WordPress Vrm 360 3D Model Viewer Plugin <= 1.2.1 is vulnerable to Sensitive Data Exposure

Software Vrm 360 3D Model Viewer Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Sensitive Data Exposure CVE CVE-2023-5177 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 41f6e6c8c32c Credits Jonatas Souza Vill...

WordPress ActivityPub Plugin < 1.0.0 is vulnerable to Sensitive Data Exposure

Software ActivityPub Type Plugin Vulnerable versions 1.0.0 Fixed in 1.0.0 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-3706 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e5fb73f459f7 Credits Erwan LR WPScan Required privilege...

WordPress ActivityPub Plugin < 1.0.0 is vulnerable to Sensitive Data Exposure

Software ActivityPub Type Plugin Vulnerable versions 1.0.0 Fixed in 1.0.0 OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-3707 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1da6b07d6d66 Credits Erwan LR WPScan Required privilege...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from processing web content that may disclose...

WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing

Description The plugin does not block listing the contents of the directories where it stores attachments to job applications, allowing unauthenticated visitors to list and download private attachments if the autoindex feature of the web server is enabled. PoC...

WordPress Ad Inserter Plugin <= 2.7.30 is vulnerable to Sensitive Data Exposure

Software Ad Inserter Type Plugin Vulnerable versions = 2.7.30 Fixed in 2.7.31 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4668 Patch priority Low CVSS severity Low 5.3 Developer Igor Funa PSID c1880bc4c6b9 Credits Marco Wotschka Required privilege...

WordPress Ad Inserter Plugin <= 2.7.30 is vulnerable to Sensitive Data Exposure

Software Ad Inserter Type Plugin Vulnerable versions = 2.7.30 Fixed in 2.7.31 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-4645 Patch priority Low CVSS severity Low 5.3 Developer Igor Funa PSID d835574a9ec2 Credits Marco Wotschka Required privilege...