WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.0.3...

How to Protect Personal Data in Today’s API Economy

...

The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system allows a perpetrator to access confidential information.

The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

CVE-2025-20305

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists because certain files lack proper data protection mechanisms. An attacker with read-only Administrato...

Confidential Computing for Cloud Security: Exploring Hardware Based Encryption Using Trusted Execution Environments

The growth of cloud computing has revolutionized data processing and storage capacities to another levels of scalability and flexibility. But in the process, it has created a huge challenge of security, especially in terms of safeguarding sensitive data. Classical security practices, including...

CVE-2025-20305

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists because certain files lack proper data protection mechanisms. An attacker with read-only Administrato...

CVE-2025-20305

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists because certain files lack proper data protection mechanisms. An attacker with read-only Administrato...

CVE-2025-20305

Cisco ISE (web-based management interface) contains an information-disclosure vulnerability where certain files lack proper data protection, enabling an authenticated, read-only administrator to view passwords normally hidden to that role. Impact is limited to confidentiality (viewing sensitive c...

CVE-2025-20305

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability exists because certain files lack proper data protection mechanisms. An attacker with read-only Administrato...

Apple patches 50 security flaws—update now

Apple has released security updates for iPhones, iPads, Macs, Apple Watches, Apple TVs, Safari, and Xcode, fixing nearly 50 security flaws. Some of these bugs could let cybercriminals see your private data, take control of parts of your device, or break key security protections. Installing these...

CVE-2025-43500

A privacy issue was addressed with improved handling of user preferences. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, visionOS 26.1, watchOS 26.1. An app may be able to access sensitive user data...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

PT-2025-45127

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description A flaw exists in the web-based management interface of Cisco ISE that could allow a remote attacker with existing administrator privileges to access sensitive information. The issue stems...

Microsoft Edge browser’s vulnerability, related to a flaw in data protection mechanisms, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

The vulnerability of the Blue Mail email client relates to a violation of data protection mechanisms, allowing attackers to carry out phishing attacks.

The vulnerability of the Blue Mail email client is related to a violation of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to perform phishing attacks...

The vulnerability of the Canary Mail email client, related to the violation of data protection mechanisms, allows attackers to carry out phishing attacks.

The vulnerability of the Canary Mail email client is related to a violation of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to carry out phishing attacks...

The vulnerability of the Thunderbird email client, related to the violation of data protection mechanisms, allows attackers to carry out phishing attacks.

The vulnerability of the Thunderbird email client is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to carry out phishing attacks...

Cisco Identity Services Engine 安全漏洞

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco USA. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. A security vulnerability exists in t...

CVE-2025-43395

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Tahoe 26.1, macOS Sonoma 14.8.2. An app may be able to access protected user data...

CVE-2025-43405

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access user-sensitive data...