31 matches found
EUVD-2020-27447
Malware in sbrugna...
PT-2024-9116 · Hewlett Packard · Hpe Autopass License Server
Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to incorrect restriction of XML links to external objects in the HPE AutoPass License Server software. Exploitation of this issue may allow an...
ROS-20241023-07
Vulnerability of the BufWinLeave function of the vim text editor is related to memory usage after its release. Exploitation of the vulnerability could allow an attacker to gain access to confidential information. information...
The vulnerability of the Nextcloud Notes note-taking application, which allows a hacker to access confidential information
The vulnerability of the Nextcloud Notes note-taking application lies in the ability to share the Notes folder with a new user before he enters the system. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information...
The vulnerability of INPAS SOFT UniPORT Eslip software lies in the insufficient validation of input data, allowing a perpetrator to access confidential information.
The vulnerability of INPAS SOFT UniPORT Eslip software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
CVE-2023-45598
A CWE-425 “Direct Request 'Forced Browsing'” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx61.0.7-2...
CVE-2024-1709
ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems. Recent assessments: sfewer-r7 at February 22, 2024 4:54pm UTC reported:...
The vulnerability of the macOS Ventura operating system’s Shortcuts component, which allows a hacker to gain access to confidential information
The vulnerability of the macOS Ventura operating system’s Shortcuts component is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential information...
CVE-2023-40730
A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service...
The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to gain access to confidential information.
The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to access confidential information...
PT-2023-5566 · Ril · Ril
Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to a missing bounds check, which could lead to an out of bounds write. This might result in local escalation of privilege, with System execution privileges required for...
The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to bypass the authentication process and gain access to confidential information.
The vulnerability of the D-Link DSL-3782 router’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information through a specially crafted...
PT-2022-6910 · 1с · 1С-Битрикс
Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the 1С-Битрикс site management system. Exploitation of this issue could allow a remote attacker t...
The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series, related to security vulnerabilities, allows attackers to access confidential information.
The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series is related to security vulnerabilities. Exploiting this vulnerability can allow an attacker to gain access to confidential information...
The vulnerability of the Screen Capture function in the Google Chrome browser allows a hacker to gain access to confidential information.
The vulnerability of the Screen Capture function in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information through a specially created web page...
CVE-2022-24348
A flaw was found in GitOps. This flaw allows an attacker with permissions to create or update applications in ArgoCD to craft a malicious helm chart that contains symbolic links pointing to arbitrary paths outside the repository root folder, leading to a path traversal issue. This issue enables t...
ROS-2-1874
2.1874 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...
ROS-2-1722
2.1722 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...
ROS-2-1972
2.1972 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...
ROS-2-1947
2.1947 Multiple vulnerabilities in PostgreSQL CVE-2021-32027, CVE-2021-32028, CVE-2021-32029 1. Vulnerability Description: CVE-2021-32027 The vulnerability allows a remote attacker to execute arbitrary code on the target system. CVE-2021-32028, CVE-2021-32029 Vulnerability allows a remote user to...