Page 53 of 12674 results (0.086 seconds)

CVSS: 7.5EPSS: 0%CPEs: -EXPL: 0

CVE-2024-51362

https://notcve.org/view.php?id=CVE-2024-51362

05 Nov 2024 — The LSC Smart Connect Indoor IP Camera V7.6.32 is vulnerable to an information disclosure issue where live camera footage can be accessed through the RTSP protocol on port 8554 without requiring authentication. • https://shinxyy.github.io/blogs/CVE_2024_51362.html • CWE-306: Missing Authentication for Critical Function •

CVSS: 5.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2024-32870 – iTop hub connector Information disclosure

https://notcve.org/view.php?id=CVE-2024-32870

04 Nov 2024 — Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be read by anyone having access to iTop URI. This issue has been patched in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. • https://github.com/Combodo/iTop/security/advisories/GHSA-rfjh-2f5x-qxmx • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-51556 – Sensitive Information Disclosure Vulnerability in Wave 2.0

https://notcve.org/view.php?id=CVE-2024-51556

04 Nov 2024 — An authenticated remote attacker could exploit this vulnerability by manipulating a parameter “user_id” through API request URLs leading to unauthorized access to sensitive information belonging to other users. ... An authenticated remote attacker could exploit this vulnerability by manipulating API input parameters through API request URL/payload leading to unauthorized access to sensitive information belonging to other users. • https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0332 • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-10523 – Information Disclosure Vulnerability in TP-Link IoT Smart Hub

https://notcve.org/view.php?id=CVE-2024-10523

04 Nov 2024 — This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device. • https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0331 • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20124

https://notcve.org/view.php?id=CVE-2024-20124

04 Nov 2024 — This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20123

https://notcve.org/view.php?id=CVE-2024-20123

04 Nov 2024 — This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20122

https://notcve.org/view.php?id=CVE-2024-20122

04 Nov 2024 — This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 4.4EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-20117

https://notcve.org/view.php?id=CVE-2024-20117

04 Nov 2024 — This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 6.2EPSS: 0%CPEs: -EXPL: 0

CVE-2024-20107

https://notcve.org/view.php?id=CVE-2024-20107

04 Nov 2024 — This could lead to local information disclosure with no additional execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/November-2024 • CWE-125: Out-of-bounds Read •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-41741 – IBM TXSeries for Multiplatforms information disclosure

https://notcve.org/view.php?id=CVE-2024-41741

01 Nov 2024 — IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system. • https://www.ibm.com/support/pages/node/7174572 • CWE-208: Observable Timing Discrepancy •