3709 matches found
The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the checkfuncarg function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
[SECURITY] Fedora 42 Update: qt6-qtspeech-6.9.1-1.fc42
The module enables a Qt application to support accessibility features such as text-to-speech, which is useful for end-users who are visually challenged or cannot access the application for whatever reason. The most common use case where text-to-speech comes in handy is when the end-user is drivin...
The vulnerability of the General component of Oracle Secure Backup software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the General component of Oracle Secure Backup is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
WordPress Accessibility Suite plugin authorization issue vulnerability
WordPress Accessibility Suite plugin is a plugin designed to enhance the accessibility of your website. WordPress Accessibility Suite plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no detailed vulnerability details are provided at this time...
The vulnerability of the cleanup_bearer() function in the net/tipc/udp-media.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cleanupbearer function in the net/tipc/udp-media.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the distributed database management system Apache Cassandra, related to improper handling of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-30636
Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...
CVE-2025-30636
Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...
CVE-2025-30636 WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...
CVE-2025-30636 WordPress Accessibility Suite plugin <= 4.19 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...
CVE-2025-30636
CVE-2025-30636 (WordPress Accessibility Suite) is a Missing Authorization vulnerability affecting Accessibility Suite by Ability, Inc, listed as
PT-2025-24153 · Ability · Accessibility Suite
Name of the Vulnerable Software and Affected Versions: Ability, Inc Accessibility Suite versions through 4.19 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Ability, In...
WordPress plugin Accessibility Suite 安全漏洞
WordPress Accessibility Suite plugin is a plugin designed to enhance the accessibility of your website. WordPress Accessibility Suite plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no detailed vulnerability details are provided at this time...
The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the jffs2_rtime_decompress() function in the fs/jffs2/compr_rtime.c module of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the jffs2rtimedecompress function in the fs/jffs2/comprrtime.c module of the Linux kernel operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Zanubis in motion: Tracing the active evolution of the Android banking malware
Introduction Zanubis is a banking Trojan for Android that emerged in mid-2022. Since its inception, it has targeted banks and financial entities in Peru, before expanding its objectives to virtual cards and crypto wallets. The main infection vector of Zanubis is impersonating legitimate Peruvian...
The vulnerability of the web_sys_infoContact_post() function in PLANET Technology’s microcontroller software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the websysinfoContactpost function in PLANET Technology’s microcontroller software stems from the operation of the function beyond the buffer boundaries in memory when processing the contact parameter. Exploiting this vulnerability could allow an attacker to compromise the...
CVE-2024-43087
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...