
CVE-2024-28885
https://notcve.org/view.php?id=CVE-2024-28885
13 Nov 2024 — Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html • CWE-203: Observable Discrepancy •

CVE-2024-33617
https://notcve.org/view.php?id=CVE-2024-33617
13 Nov 2024 — Insufficient control flow management in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01177.html • CWE-691: Insufficient Control Flow Management •

CVE-2024-39285
https://notcve.org/view.php?id=CVE-2024-39285
13 Nov 2024 — Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01175.html • CWE-284: Improper Access Control •

CVE-2024-11193
https://notcve.org/view.php?id=CVE-2024-11193
13 Nov 2024 — An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext within application logs. This flaw results in the unintentional exposure of sensitive information in Yugabyte Anywhere logs, potentially allowing unauthorized users with access to these logs to view the LDAP bi... • https://github.com/yugabyte/yugabyte-db/commit/0bf6e5a3e9c0718a28e654483596615d0798b208 • CWE-532: Insertion of Sensitive Information into Log File •

CVE-2024-28051
https://notcve.org/view.php?id=CVE-2024-28051
13 Nov 2024 — Out-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially enable information disclosure via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01131.html • CWE-125: Out-of-bounds Read •

CVE-2024-25563
https://notcve.org/view.php?id=CVE-2024-25563
13 Nov 2024 — Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html • CWE-665: Improper Initialization •

CVE-2024-43090
https://notcve.org/view.php?id=CVE-2024-43090
13 Nov 2024 — This could lead to local information disclosure with User execution privileges needed. • https://github.com/nidhihcl75/frameworks_base_AOSP10_r33_CVE-2024-43090 • CWE-862: Missing Authorization •

CVE-2024-43086
https://notcve.org/view.php?id=CVE-2024-43086
13 Nov 2024 — This could lead to local information disclosure with no additional execution privileges needed. • https://android.googlesource.com/platform/frameworks/base/+/55a3d36701bb874358f685d3ac3381eda10fcff0 • CWE-276: Incorrect Default Permissions •

CVE-2024-43084
https://notcve.org/view.php?id=CVE-2024-43084
13 Nov 2024 — In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. • https://android.googlesource.com/platform/frameworks/base/+/50eec20b570cd4cbbe8c5971af4c9dda3ddcb858 •

CVE-2024-43082
https://notcve.org/view.php?id=CVE-2024-43082
13 Nov 2024 — This could lead to local information disclosure with no additional execution privileges needed. • https://android.googlesource.com/platform/frameworks/base/+/6aa1b4fbf5936a1ff5bdbb79397c94910a6ed8f5 • CWE-125: Out-of-bounds Read •