CVE-2024-23838 – TrueLayer.Client SSRF when fetching payment or payment provider
https://notcve.org/view.php?id=CVE-2024-23838
For applications using the SDK, requests to unexpected resources on local networks or to the internet could be made which could lead to information disclosure. • https://github.com/TrueLayer/truelayer-dotnet/commit/75e436ed5360faa73d6e7ce3a9903a3c49505e3e https://github.com/TrueLayer/truelayer-dotnet/security/advisories/GHSA-67m4-qxp3-j6hh • CWE-918: Server-Side Request Forgery (SSRF) •
CVE-2024-1033 – openBI Datament.php agent information disclosure
https://notcve.org/view.php?id=CVE-2024-1033
The manipulation of the argument api leads to information disclosure. ... Dank Manipulation des Arguments api mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. • https://note.zhaoj.in/share/nD654ot6zRQZ https://vuldb.com/?ctiid.252308 https://vuldb.com/?id.252308 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2023-7204 – WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
https://notcve.org/view.php?id=CVE-2023-7204
This makes it possible for unauthenticated attackers to extract sensitive data. • https://wpscan.com/vulnerability/65a8cf83-d6cc-4d4c-a482-288a83a69879 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-668: Exposure of Resource to Wrong Sphere •
CVE-2024-21382 – Microsoft Edge for Android Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-21382
Microsoft Edge for Android Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Edge para Android • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21382 • CWE-942: Permissive Cross-domain Policy with Untrusted Domains •
CVE-2024-23619 – IBM Merge Healthcare eFilm Workstation Hardcoded Credentials
https://notcve.org/view.php?id=CVE-2024-23619
A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution. • https://blog.exodusintel.com/2024/01/25/ibm-merge-healthcare-efilm-workstation-information-disclosure • CWE-798: Use of Hard-coded Credentials •