CWE:

	Tytuł	Data	Autor
Med.	polymail.io PPI Scanner /Insecure -IIS 7.5/Source Code Information Disc.	05.12.2018	Juan Carlos Garcia
Med.	WhatsApp Failure To Delete	20.05.2017	Yakov Shafranovich

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-17

CVE-2024-49386

Updating...

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24.

2024-09-19

	CVE-2024-47085	Updating...	This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters �??cCdslClicentcode�?� and �??cLdClientCode�?� in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.
	CVE-2024-47087	Updating...	This vulnerability exists in Apex Softcell LD Geo due to improper validation of the certain parameters (Client ID, DPID or BOID) in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to exposure of sensitive information belonging to other users.

2024-09-18

CVE-2024-8891

Updating...

An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is present in CIRCUTOR Q-SMT in its firmware version 1.0.4.

2024-09-11

CVE-2024-45787

Updating...

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL and intercepting response of the API request leading to exposure of sensitive information belonging to other users.

2024-09-10

	CVE-2024-44113	Updating...	Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.
	CVE-2024-41729	Updating...	Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.
	CVE-2024-45591	Updating...	XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker knows the name. The exposed information includes for each modification of the page the time of the modification, the version number, the author of the modification (both username and displayed name) and the version comment. This information is exposed regardless of the rights setup, and even when the wiki is configured to be fully private. On a private wiki, this can be tested by accessing /xwiki/rest/wikis/xwiki/spaces/Main/pages/WebHome/history, if this shows the history of the main page then the installation is vulnerable. This has been patched in XWiki 15.10.9 and XWiki 16.3.0RC1.

2024-07-25

CVE-2024-38103

Updating...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

2024-07-24

CVE-2024-37533

Updating...

IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727.

 

---

Copyright 2024, cxsecurity.com