PT-2025-47747

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

The vulnerability of the Secure-T Awareness Platform, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Secure-T Awareness Platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

​​Ambient and autonomous security for the agentic era​​

Over the past year, I've had countless conversations with customers who are striving to unlock human ambition with AI. They are on their journey to become Frontier Firms, where humans and agents push the boundaries of innovation and create new possibilities, empowering humans to become limitless...

The vulnerability of the SQL Anywhere Monitor, a database administration tool for relational database management systems like SAP SQL Anywhere, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SQL Anywhere Monitor database administration tool of the SAP SQL Anywhere relational database management system lies in the use of rigidly programmed user credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the Portainer container management platform, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.

The vulnerability of the Portainer container management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

The vulnerability of the ZenCount visitor counter allows attackers to compromise the confidentiality of the protected information, due to insufficient protection of operational data.

The vulnerability of the ZenCount visitor counter is related to insufficient protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the protected information...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to insufficient protection of operational data, allows attackers to disclose protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD lies in the insufficient protection of sensitive data at the final endpoint /api/v1/projects/project/detailed. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of ZenCount visitor counters lies in the insufficient protection of operational data, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ZenCount visitor counter is related to insufficient protection for operational data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Pandora FMS monitoring and management system, related to the lack of measures taken at the control level to clean data, allows a perpetrator to execute arbitrary commands and implant arbitrary OS commands.

The vulnerability of the Pandora FMS system for monitoring and managing IT environments stems from the lack of measures taken at the management level to secure data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and inject arbitrary OS commands...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of operational data, which allows an attacker to disclose sensitive information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

The vulnerability of Microsoft Visual Studio Code’s source editor, related to a flaw in its data protection mechanism, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s editor is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the insufficient protection of sensitive data, allowing attackers to disclose confidential information.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow attackers to disclose protected information...

MGASA-2025-0273 Updated unbound packages fix security vulnerability

Several multi-vendor cache poisoning vulnerabilities have been discovered in caching resolvers for non-DNSSEC protected data. Unbound is vulnerable for some of these cases that could lead to domain hijacking CVE-2025-11411...

The vulnerability of Google Chrome’s Devtools component allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WordPress Plugin FunnelKit Automations Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin FunnelKit Automations,...

ROS-20251111-07

A vulnerability in the Downloads component of the Google Chrome and Microsoft Edge browsers is related to a false representation of critical information by the user interface. presentation of critical information by the user interface. Exploitation of the vulnerability could Allow an attacker...

WordPress Plugin KiotViet Sync Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin KiotViet Sync, which ste...

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems allows a thief to disable this function.

The vulnerability of the Stolen Device Protection function in iOS and iPadOS operating systems is related to insufficient protection for service data. Exploiting this vulnerability could allow a hacker to disable the Stolen Device Protection function...

Advisory ROSA-SA-2025-3058

Software: libxslt 1.1.32 OS: ROSA Virtualization 3.1 unaffected versions = libxslt-1.1.32-6.3.rv31 affected versions libxslt-1.1.32-6.3.rv31 CVE-ID: CVE-2023-40403 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libxslt library of the iPadOS, tvOS, iOS, watchOS, macOS operating system is...

Singling out People without Knowing Their Names - Behavioural Targeting, Pseudonymous Data, and the New Data Protection Regulation

Information about millions of people is collected for behavioural targeting, a type of marketing that involves tracking people's online behaviour for targeted advertising. It is hotly debated whether data protection law applies to behavioural targeting. Many behavioural targeting companies say...