Acronis Cyber Protect/Backup machine info disclosure

Acronis Cyber Protect or Backup is an enterprise backup/recovery solution for all, compute, storage and application resources. Businesses and Service Providers are using it to protect and backup all IT assets in their IT environment. This module exploits an authentication bypass vulnerability at...

CVE-2024-50358

A CWE-15 "External Control of System or Configuration Setting" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by authenticated users by restoring a tampered...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the software environment for simulation modeling of systems and processes in Siemens Tecnomatix Plant Simulation lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a attacker to execute arbitrary code using specially...

The vulnerability of the hypervisor in FreeBSD operating systems allows a hacker to execute arbitrary code.

The vulnerability of the hypervisor in FreeBSD operating systems relates to a single-shift error. Exploiting this vulnerability allows an attacker to execute arbitrary code...

mySCADA myPRO Manager Access Control Error Vulnerability

mySCADA myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO Manager, which can be exploited by an attacker to submit a special request for unauthorized access to...

mySCADA myPRO Manager

RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands or disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such...

Linux kernel uncontrolled resource consumption vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An uncontrolled resource consumption vulnerability exists in the Linux kernel, which stems from failure to free memory after its effective lifetime, and can be exploited by an...

Arbitrary File Download Vulnerability in DMagent of Damon 8 Database of Wuhan Damon Database Co.

Founded in 2000, Wuhan Damon Database Co., Ltd. is a leading database product development service provider in China. There is an arbitrary file download vulnerability in the DMagent of the Damon 8 database of Wuhan Damon Database Co., Ltd. that can be exploited by attackers to obtain sensitive...

Lunary Information Disclosure Vulnerability

lunary is lunary open source a production toolkit for LLM . lunary suffers from an information disclosure vulnerability that stems from the fact that tokens can be exposed to unauthorized actors, allowing them to perform operations on behalf of the user. An attacker could exploit this vulnerabili...

lunary information disclosure vulnerability (CNVD-2025-08811)

lunary is lunary open source a production toolkit for LLM . lunary has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co., Ltd (CNVD-2024-49053)

Dongsheng Logistics Software is a logistics management software integrating order management, warehouse management, transportation management and other functions of Qingdao Dongsheng Weiye Software Co. There is an information leakage vulnerability in Dongsheng Logistics Software of Qingdao...

CVE-2024-43189

IBM Concert Software 1.0.0 through 1.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

Google Android Information Disclosure Vulnerability (CNVD-2024-49504)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2024-45322)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A denial of service vulnerability exists in Microsoft Windows Hyper-V. An attacker could exploit this vulnerability to cause a denial of service...

Google Chrome Security Bypass Vulnerability (CNVD-2024-48379)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Google Android Information Disclosure Vulnerability (CNVD-2024-49506)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2024-49503)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-48759)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker can exploit...

Google Android Information Disclosure Vulnerability (CNVD-2024-49501)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android elevation of privilege vulnerability (CNVD-2024-47700)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...