CVE-2023-20677
https://notcve.org/view.php?id=CVE-2023-20677
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/April-2023 • CWE-125: Out-of-bounds Read •
CVE-2023-26083 – Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-26083
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall GPU Kernel Driver all versions from r19p0 - r42p0, and Avalon GPU Kernel Driver all versions from r41p0 - r42p0 allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata. • https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities https://www.cybersecurity-help.cz/vdb/SB2023033049 https://www.cybersecurity-help.cz/vulnerabilities/74210 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVE-2023-26774 – Sales Tracker Management System 1.0 Insecure Direct Object Reference
https://notcve.org/view.php?id=CVE-2023-26774
Sales Tracker Management System version 1.0 suffers from an information disclosure vulnerability. • https://packetstormsecurity.com/files/171692/Sales-Tracker-Management-System-1.0-Insecure-Direct-Object-Reference.html https://twitter.com/retrymp3 https://www.sourcecodester.com/download-code?nid=16061&title=Sales+Tracker+Management+System+using+PHP+Free+Source+Code https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html •
CVE-2023-1858 – SourceCodester Earnings and Expense Tracker App index.php information disclosure
https://notcve.org/view.php?id=CVE-2023-1858
The manipulation of the argument page leads to information disclosure. ... Durch die Manipulation des Arguments page mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. • https://vuldb.com/?ctiid.224997 https://vuldb.com/?id.224997 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2023-28069
https://notcve.org/view.php?id=CVE-2023-28069
A remote unauthenticated attacker can phish the legitimate user to redirect to malicious website leading to information disclosure and launch of phishing attacks. • https://www.dell.com/support/kbdoc/en-us/000204266/dsa-2022-258-dell-streaming-data-platform-security-update-for-multiple-third-party-component-vulnerabilities • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •