4759 matches found
Dell PowerProtect Data Domain Cross-Site Scripting Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A cross-site scripting vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to inject malicious HTML or JavaScript code...
Dell PowerProtect Data Domain OS Command Injection Vulnerability (CNVD-2024-31085)
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. An operating system command injection vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to execute arbitrary operating...
Dell PowerProtect Data Domain Weak Encryption Algorithm Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A weak cryptographic algorithm vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause a man-in-the-middle attack,...
Dell PowerProtect Data Domain Improper Resource Control Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A resource miscontrol vulnerability exists in Dell PowerProtect Data Domain, which can be exploited by an attacker to cause a denial of service...
The vulnerability of the on-premise resource planning software of Microsoft Dynamics 365 involves insufficient protection for operational data, allowing attackers to disclose sensitive information.
The vulnerability of the on-premise resource planning software of Microsoft Dynamics 365 is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...
Dell PowerProtect Data Domain Directory Traversal Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A directory traversal vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause an application to send unauthorized...
Dell PowerProtect Data Domain Log Information Disclosure Vulnerability
Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A log information disclosure vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause reuse of publicly available...
PT-2024-7447 · Sap · Sap Landscape Management
Name of the Vulnerable Software and Affected Versions: SAP Landscape Management affected versions not specified Description: The issue is related to the REST Provider Definition response in SAP Landscape Management, which allows an authenticated user to read confidential data. This can cause a hi...
Stolen Singaporean Identities Sold on Dark Web Starting at $8
Singapore citizens, beware! Cybercriminals are targeting your digital identities and KYC data, starting at just $8, putting users at risk of exploitation. Learn how to protect your data, finances, and reputation with strong passwords, multi-factor authentication, and smart online habits...
WordPress WP Cookie Consent ( for GDPR, CCPA & ePrivacy ) plugin <= 3.2.0 - Unauthenticated Stored Cross-Site Scripting via Client-IP header vulnerability
Unauthenticated Stored Cross-Site Scripting via Client-IP header vulnerability discovered by Krzysztof Zając in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 3.2.0...
How to Cut Costs with a Browser Security Platform
Browser security is becoming increasingly popular, as organizations understand the need to protect at the point of risk - the browser. Network and endpoint solutions are limited in their ability to protect from web-borne threats like phishing websites or malicious browser extensions. They also do...
CVE-2024-22168 Cross-Site Scripting (XSS) vulnerability on Western Digital My Cloud and SanDisk ibi Web Apps
A Cross-Site Scripting XSS vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found which could allow an attacker to redirect the user to a crafted domain and reset their credentials, or to execute arbitrary client-side code in the user’s browser session to carry...
The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.
The vulnerability of Windows operating system-based Cryptographic Services is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the Adobe FrameMaker Publishing Server (FMPS) in automating document publishing and content management processes stems from insufficient protection of administrative data. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the Adobe FrameMaker Publishing Server FMPS in automating document publishing and content management is related to insufficient protection of administrative data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges remotely...
TikTok facing fresh lawsuit in US over children’s privacy
The Federal Trade Commission FTC has announced its referred a complaint against TikTok and parent company ByteDance to the Department of Justice. The investigation originally focused on Musical.ly which was acquired by ByteDance on November 10, 2017, and merged it into TikTok. The FTC started a...
CVE-2024-38329
IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...
CVE-2024-38329
CVE-2024-38329 affects IBM Storage Protect for Virtual Environments: Data Protection for VMware, versions 8.1.0.0–8.1.22.0. The root cause is improper validation of user permissions, allowing a remote authenticated attacker to bypass restrictions and change settings, trigger or restore backups, a...
CVE-2024-38329 IBM Storage Protect for Virtual Environments: Data Protection for VMware security bypass
IBM Storage Protect for Virtual Environments: Data Protection for VMware 8.1.0.0 through 8.1.22.0 could allow a remote authenticated attacker to bypass security restrictions, caused by improper validation of user permission. By sending a specially crafted request, an attacker could exploit this...
PT-2024-27945 · Ibm · Ibm Storage Protect For Virtual Environments
Name of the Vulnerable Software and Affected Versions: IBM Storage Protect for Virtual Environments: Data Protection for VMware versions 8.1.0.0 through 8.1.22.0 Description: The issue is caused by improper validation of user permission, allowing a remote authenticated attacker to bypass security...
The vulnerability of the Microsoft Visual Studio software development tool lies in the violation of data protection mechanisms, allowing attackers to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...