4759 matches found
The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.
The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...
The vulnerability of the BoltWire content management system, related to insufficient protection of operational data, allows a hacker to gain access to confidential information.
The vulnerability of the BoltWire content management system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
Microsoft Windows DPAPI Security Vulnerability
Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows DPAPI Data Protection Application Programming Interface. An attacker could exploit this vulnerability to perform spoofing attacks...
PT-2023-8109 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows operating system's DHCP server service. This can be exploited by a remote attacker to disclose protected...
The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming systems allows a perpetrator to bypass the configured access control list.
The vulnerability of the “per-user-override” function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD microprogramming systems relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to bypass the configured...
The vulnerability of the Joomla! content management system lies in the lack of protection for administrative data, allowing attackers to access confidential information.
The vulnerability of the Joomla! content management system is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
GHSA-W4X6-HH3X-WJRX Stale copy of the public suffix list
We have identified that this project contains an out-of-date version of the Public Suffix List https://publicsuffix.org/. We are carrying out research to identify the potential impacts of using old versions of the Public Suffix List, and we intend to publish our results in academic conferences an...
The vulnerability of the `createPendingIntent` function in the CredentialManagerUi.java file in the Android operating system, which allows a hacker to disclose protected information
The vulnerability of the createPendingIntent function in the CredentialManagerUi.java file of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...
Microsoft Edge browser’s vulnerability, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Edge relates to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the Hazelcast data analysis platform lies in the insufficient protection of registration data, which allows attackers to disclose protected information.
The vulnerability of the Hazelcast data analysis platform lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the mod_webdav.so module of the Wi-Fi router software by ASUS RT-AX92U allows a hacker to gain access to protected information.
The vulnerability of the modwebdav.so module in the ASUS RT-AX92U Wi-Fi router software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information...
The vulnerability of the tracker-miners package in the GNOME environment of Linux operating systems allows a hacker to circumvent the restrictions of a isolated software environment.
The vulnerability of the tracker-miners package in the GNOME environment of Linux operating systems is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to circumvent the restrictions of a isolated software environment...
New Microsoft Purview features use AI to help secure and govern all your data
In the past few years, we have witnessed how digital and cloud transformation has accelerated the growth of data. With more and more customers moving to the cloud, and with the rise of hybrid work, data usage has moved beyond the traditional borders of business. Data is now stored in multiple clo...
2024 Predictions for Cybersecurity: The Rise of AI Brings New Challenges
The emergence of generative AI has put new resources in the hands of both attackers and defenders, and in 2024, Imperva believes the technology will have an even greater impact. Understanding how attackers are leveraging the technology will be critical for organizations seeking to keep...
Dell DM5500 Buffer Overflow Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a buffer overflow vulnerability that originates from a boundary error when processing untrusted input in PPOE,...
Dell DM5500 Elevation of Privilege Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an elevation of privilege vulnerability that can be exploited by an attacker to escape a restricted shell and...
Dell DM5500 Cross-Site Scripting Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escapin...
Dell DM5500 Operating System Command Injection Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an operating system command injection vulnerability that stems from a failure to properly filter construct...
Dell DM5500 Path Traversal Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a path traversal vulnerability that stems from a failure to properly filter special elements in the path of a...
Dell DM5500 Authentication Error Vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an Authentication Error vulnerability that originates from incorrect authentication of the system and can be...