CVE-2026-33779: Improper Following of a Certificate's Chain of Trust

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect t...

The vulnerability of Google Chrome browser’s Passkeys technology, which allows a hacker to gain access to confidential information

The vulnerability of Google Chrome browser’s Passkeys technology relates to the disclosure of information in debugging messages. Exploiting this vulnerability can allow attackers to gain access to confidential information...

EUVD-2020-27447

Malware in sbrugna...

CVE-2025-41010: Permissive Cross-domain Policy with Untrusted Domains

Incorrect Cross-Origin Resource Sharing CORS configuration in Hiberus Sintra. Cross-Origin Resource Sharing CORS allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol...

The vulnerability of the interaction library for Python-glance-store programming language, related to the registration of redundant data, allows attackers to access confidential information.

The vulnerability of the interaction library for Python-glance-store programming language involves the registration of excessive data. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2025-53902: Incorrect Authorization

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

CVE-2025-0652: Incorrect Authorization

An issue has been discovered in GitLab EE/CE affecting all versions starting from 16.9 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2 could allow unauthorized users to access confidential information intended for internal use only...

PT-2024-9116 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server affected versions not specified Description: The issue is related to incorrect restriction of XML links to external objects in the HPE AutoPass License Server software. Exploitation of this issue may allow an...

ROS-20241023-07

Vulnerability of the BufWinLeave function of the vim text editor is related to memory usage after its release. Exploitation of the vulnerability could allow an attacker to gain access to confidential information. information...

The vulnerability of the Nextcloud Notes note-taking application, which allows a hacker to access confidential information

The vulnerability of the Nextcloud Notes note-taking application lies in the ability to share the Notes folder with a new user before he enters the system. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information...

The vulnerability of INPAS SOFT UniPORT Eslip software lies in the insufficient validation of input data, allowing a perpetrator to access confidential information.

The vulnerability of INPAS SOFT UniPORT Eslip software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2024-34130: Incorrect Authorization

Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could exploit this vulnerability to access confidential information. Exploitation of this issue does not require user...

PT-2024-9067

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The issue is related to a refcount leak in the pinctrl dt to map function. If the allocation of the propname buffer fails, the reference count is not dropped, which can lead to a leak. The...

PT-2024-3079

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.60 Description The issue is related to insufficient data validation in the Downloads section of Google Chrome, allowing a remote attacker to perform UI spoofing via a crafted HTML page. This could...

PT-2024-3084

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description The issue is related to insufficient policy enforcement in Site Isolation, which can be exploited by a remote attacker to bypass navigatio...

CVE-2023-45598

A CWE-425 “Direct Request 'Forced Browsing'” vulnerability in the “measure” functionality of the web application allows a remote unauthenticated attacker to access confidential measure information. This issue affects: AiLux imx6 bundle below version imx61.0.7-2...

CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems. Recent assessments: sfewer-r7 at February 22, 2024 4:54pm UTC reported:...

CVE-2024-1709: Authentication Bypass Using an Alternate Path or Channel

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel vulnerability, which may allow an attacker direct access to confidential information or critical systems...

The vulnerability of the macOS Ventura operating system’s Shortcuts component, which allows a hacker to gain access to confidential information

The vulnerability of the macOS Ventura operating system’s Shortcuts component is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential information...

CVE-2023-40730

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service...