Page 5 of 10543 results (0.023 seconds)

CVSS: 5.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2024-32870 – iTop hub connector Information disclosure

https://notcve.org/view.php?id=CVE-2024-32870

Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. • https://github.com/Combodo/iTop/security/advisories/GHSA-rfjh-2f5x-qxmx • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-51556 – Sensitive Information Disclosure Vulnerability in Wave 2.0

https://notcve.org/view.php?id=CVE-2024-51556

This vulnerability exists in the Wave 2.0 due to weak encryption of sensitive data received at the API response. • https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-10523 – Information Disclosure Vulnerability in TP-Link IoT Smart Hub

https://notcve.org/view.php?id=CVE-2024-10523

An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device. • https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0331 • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20124

https://notcve.org/view.php?id=CVE-2024-20124

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20123

https://notcve.org/view.php?id=CVE-2024-20123

This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •