CVSS: 5.5EPSS: 0%CPEs: 16EXPL: 0CVE-2024-43554 – Windows Kernel-Mode Driver Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-43554
08 Oct 2024 — Windows Kernel-Mode Driver Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43554 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2024-43534 – Windows Graphics Component Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-43534
08 Oct 2024 — Windows Graphics Component Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43534 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2024-43508 – Windows Graphics Component Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-43508
08 Oct 2024 — Windows Graphics Component Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43508 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-47948
https://notcve.org/view.php?id=CVE-2024-47948
08 Oct 2024 — In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-23: Relative Path Traversal •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2024-39806 – Liteos_a has an out-of-bounds Read vulnerability
https://notcve.org/view.php?id=CVE-2024-39806
08 Oct 2024 — in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-10.md • CWE-125: Out-of-bounds Read •
CVSS: 6.1EPSS: 0%CPEs: -EXPL: 0CVE-2024-45426
https://notcve.org/view.php?id=CVE-2024-45426
08 Oct 2024 — Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. •
CVSS: 6.1EPSS: 0%CPEs: -EXPL: 0CVE-2024-45425
https://notcve.org/view.php?id=CVE-2024-45425
08 Oct 2024 — Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure via network access. •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-47011 – Ivanti Avalanche Faces ResourceManager Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-47011
08 Oct 2024 — Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Faces Mojarra component. The issue results from the use of a vulnerable third-party library. An attacker can leverage this vulnerability to disclose information in... • https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-47008 – Ivanti Avalanche validateAMCWSConnection Server-Side Request Forgery Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2024-47008
08 Oct 2024 — Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the validateAMCWSConnection method. The issue results from the lack of proper validation of a URI prior to accessing resources. An ... • https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 5.1EPSS: 0%CPEs: -EXPL: 0CVE-2024-47973
https://notcve.org/view.php?id=CVE-2024-47973
07 Oct 2024 — In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. • https://www.solidigm.com/support-page/support-security.html •