CVSS: -EPSS: 0%CPEs: -EXPL: 0CVE-2024-39339
https://notcve.org/view.php?id=CVE-2024-39339
This misconfiguration can lead to information disclosure, leaking sensitive details such as diagnostic log traces, system logs, headunit passwords, and personally identifiable information (PII). • https://docs.google.com/document/d/1S-d8zyZreYYGSIr4zGww6F2iBfD63v10Z3YVbGnp2es/edit?usp=sharing https://mohammedshine.github.io/CVE-2024-39339.html •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2024-37985 – Windows Kernel Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-37985
Windows Kernel Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37985 • CWE-1037: Processor Optimization Removal or Modification of Security-critical Code •
CVSS: 4.9EPSS: 0%CPEs: -EXPL: 0CVE-2024-46902 – Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-46902
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Deep Discovery Inspector. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of the service account. •
CVSS: 6.5EPSS: 0%CPEs: -EXPL: 0CVE-2024-46903 – Trend Micro Deep Discovery Inspector SQL Injection Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-46903
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Deep Discovery Inspector. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to disclose information in the context of the service account. •
CVSS: 3.3EPSS: 0%CPEs: -EXPL: 0CVE-2024-8816 – PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-8816
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of U3D files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. •