The vulnerability of the SuiteCRM software solution for managing customer relationships lies in its lack of measures to protect SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the SuiteCRM software solution for managing customer relationships is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to insufficient protection of operational data, allowing attackers to disclose sensitive information.

The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Dell ThinOS operating system for thin clients involves a breach of data protection mechanisms, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Dell ThinOS operating system for thin clients is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

ROS-20250908-08

A vulnerability in the JSSE component of the Oracle Java SE software platform is related to insufficient validation of the of input data. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to modify, delete and read protected information using th...

CVE-2025-58607

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...

Google Fined $379 Million by French Regulator for Cookie Consent Violations

The French data protection authority has fined Google and Chinese e-commerce giant Shein $379 million €325 million and $175 million €150 million, respectively, for violating cookie rules. Both companies set advertising cookies on users' browsers without securing their consent, the National...

WordPress plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance 跨站脚本漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Cookie...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2023 Release 1, which originates from an end-of-buffer memory...

The vulnerability of the XWiki Confluence Migrator Pro data migration tool lies in the insufficient protection of operational data, allowing attackers to disclose protected information.

The vulnerability of the XWiki Confluence Migrator Pro data migration tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Security update for ucode-intel

This update for ucode-intel fixes the following issues: Intel CPU Microcode was updated to the 20250812 release bsc1248438 CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the web control panel of the multifunctional device KATYUsha M348, which allows a intruder to disclose protected information

The vulnerability of the web control panel of the multifunctional device KATYUsha M348 is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker operating remotely to disclose the protected information...

CVE-2025-34523

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

The vulnerability of the microprogramming software of the RUGGEDCOM routing and switching platform, related to the breach of data protection mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the microprogramming software in the RUGGEDCOM routing and switching platform is related to the breach of the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the GeoWebCache component of the software for managing and publishing geospatial data on the OSGeo GeoServer server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GeoWebCache component of the software for managing and publishing geospatial data on the OSGeo GeoServer server is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

The vulnerability in the isolated iframe environment of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the isolated environment of Mozilla Firefox’s iframe technology is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information from a remote...

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink devices lies in the violation of data protection mechanisms, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of FIELDVUE Emerson ValveLink software products regarding setup, calibration, and diagnostics is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

CVE-2025-58049 XWiki PDF export jobs store sensitive cookies unencrypted in job statuses

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookies unencrypted in job statuses. XWiki...

Security Bulletin: IBM Guardium Data Protection is affected by an SQL Injection via username vulnerability (CVE-2024-55906).

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2024-55906 DESCRIPTION: IBM Security Guardium is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

Vulnerabilities fixed in Arcserve Unified Data Protection

Arcserve has fixed vulnerabilities in Arcserve Unified Data Protection UDP for all versions prior to 10.2. The vulnerabilities include an authentication bypass that allows unauthenticated malicious parties to access protected functions, a reflected cross-site scripting XSS vulnerability that allo...