Information Disclosure

mantisbt/mantisbt is vulnerable to Information Disclosure. The vulnerability is due to inadequate validation of user permissions in handling requests, allows unprivileged, registered users to access and retrieve sensitive information about other users’ personal system profiles through crafted POS...

Information Disclosure

RestrictedPython is vulnerable to Information Disclosure. The vulnerability is due to the combination of the AttributeError.obj and the string module, which allows unauthorized access to sensitive information within the RestrictedPython execution environment...

CVE-2024-46635

An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter...

Improper Authorization

Mattermost is vulnerable to Improper Authorization. The vulnerability is due to inadequate authorization mechanisms when the viewing of archived channels is disabled, allowing unauthorized access to sensitive information...

Improper Access Control

Mautic is vulnerable to Improper Access Control. The vulnerability is due to the lack of mechanisms to verify user permissions during the update process via the user interface, allowing an attacker to access sensitive information...

CVE-2024-45861: Use of Hard-coded Credentials

Kastle Systems firmware prior to May 1, 2024, contained a hard-coded credential, which if accessed may allow an attacker to access sensitive information...

SQL Injection Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform, UFIDA Network Technology Co. Ltd (CNVD-2024-39843)

The UFIDA KSOA is an enterprise-level application platform based on SOA architecture, aiming to provide comprehensive informatization solutions for enterprises. A SQL injection vulnerability exists in UFIDA Space-Time Enterprise Information Integration Platform KSOA, which can be exploited by an...

CyberArk Identity Management Information Disclosure Vulnerability (CNVD-2024-37457)

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CyberArk Identity Management Information Disclosure Vulnerability

CyberArk Identity Management is an identity management program from CyberArk Israel. CyberArk Identity Management has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2024-4556 Directory traversal vulnerability in NetIQ Access Manager

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...

CVE-2024-4556: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText NetIQ Access Manager allows access the sensitive information. This issue affects NetIQ Access Manager before 5.0.4 and before 5.1...

CVE-2024-20488 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

FastAdmin Path Traversal Vulnerability

FastAdmin is a set of web backend development framework based on ThinkPHP and Bootstrap. FastAdmin suffers from a path traversal vulnerability, which stems from the program failing to properly filter special elements in the path of a resource or file. An attacker can exploit this vulnerability to...

ROS-20240820-12

A vulnerability in the JavaFX component of Oracle GraalVM Enterprise Edition virtual machine and Oracle Java SE software platform is related to insufficient input validation. Oracle Java SE platform is related to insufficient input data validation. Exploitation of the vulnerability could allow an...

ROS-20240820-13

A vulnerability in the JavaFX component of Oracle GraalVM Enterprise Edition virtual machine and Oracle Java SE software platform is related to insufficient input validation. Oracle Java SE platform is related to insufficient input data validation. Exploitation of the vulnerability could allow an...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2024-36307)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...

Adobe InDesign Out-of-Bounds Read Vulnerability (CNVD-2024-36302)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to obtain sensitive information...

SQL Injection Vulnerability in ezEIP of Guangzhou Wando Network Technology Co.

ezEIP is an enterprise management system. Ltd. ezEIP suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Weak Password Vulnerability in U9cloud Smart Factory of UFIDA Network Technology Co.

UFIDA U9cloud Smart Factory is an intelligent solution for the manufacturing industry, designed to help enterprises realize the digitalization and intelligence of the production process A weak password vulnerability exists in UFIDA U9cloud Smart Factory, which can be exploited by attackers to...