CVE-2024-40704 – IBM InfoSphere Information Server information disclosure
https://notcve.org/view.php?id=CVE-2024-40704
IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. • https://www.ibm.com/support/pages/node/7160853 https://exchange.xforce.ibmcloud.com/vulnerabilities/298277 • CWE-522: Insufficiently Protected Credentials •
CVE-2024-25024 – IBM QRadar Suite Software information disclosure
https://notcve.org/view.php?id=CVE-2024-25024
IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 281430. • https://exchange.xforce.ibmcloud.com/vulnerabilities/281430 https://www.ibm.com/support/pages/node/7165488 •
CVE-2024-31799
https://notcve.org/view.php?id=CVE-2024-31799
Information Disclosure in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to read the WiFi passphrase via the UART Debugging Port. • https://gncchome.com/collections/indoor-camera/products/c2-indoor-security-camera-1080p https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-001 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVE-2023-50314 – IBM WebSphere Application Server Libery information disclosure
https://notcve.org/view.php?id=CVE-2023-50314
An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. • https://exchange.xforce.ibmcloud.com/vulnerabilities/274713 https://www.ibm.com/support/pages/node/7165502 • CWE-295: Improper Certificate Validation •
CVE-2023-50315 – IBM WebSphere Application Server information disclosure
https://notcve.org/view.php?id=CVE-2023-50315
An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. • https://exchange.xforce.ibmcloud.com/vulnerabilities/274714 https://www.ibm.com/support/pages/node/7165511 • CWE-295: Improper Certificate Validation •