Dell DM5500 Authentication Error Vulnerability

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an Authentication Error vulnerability that originates from incorrect authentication of the system and can be...

PT-2023-9592 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 7.0.22 Oracle VM VirtualBox versions prior to 7.1.2 Description: The issue is related to insufficient protection of internal data in the Core component of Oracle VM VirtualBox, allowing a high-privileged...

PT-2023-9637 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient protection of internal data in the Oracle WebLogic Server Core component. This can be exploited by a remote attacker to gain...

The vulnerability of the PowerStation network load balancing system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the PowerStation network load balancing system is related to the lack of authentication for critical functions, resulting from insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected...

The vulnerability of Microprogramming Software for Intel® Optane(TM) solid-state drives lies in the lack of protection for mission-critical data, allowing attackers to exploit this weakness to disclose confidential information.

The vulnerability of microprogrammed Intel® OptaneTM solid-state drives lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by security measures...

The vulnerability of the FortiSIEM security management system, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiSIEM security management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Meta sued over forcing users to pay to stop tracking

Meta is required to get users’ consent in Europe in order to show them targeted ads. For this reason, Meta has to provide European users with a way to opt out of behavioral advertising or face fines totalling $100,000 a day. Behavioral advertising are ads tailored to someone’s browsing habits and...

IBM Security Guardium CSV Injection Vulnerability (CNVD-2023-9528503)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A CSV injection vulnerability exists in IBM Security Guardi...

The vulnerability of the Local Security Authority (LSA) service on Microsoft Windows operating systems, which allows a perpetrator to disclose protected information

The vulnerability of the Local Security Authority LSA service on Microsoft Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the application programming interface of the WordPress website management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WordPress website content management system’s application interface is related to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the IBM QRadar WinCollect Agent’s event forwarding mechanism, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Intel Data Center Manager SDK software lies in its lack of data protection mechanisms, allowing attackers to exploit their privileges.

The vulnerability of the Intel Data Center Manager SDK development tools is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges...

ID Theft Service Resold Access to USInfoSearch Data

One of the cybercrime undergrounds more active sellers of Social Security numbers, background and credit reports has been pulling data from hacked accounts at the U.S. consumer data broker USinfoSearch, KrebsOnSecurity has learned. Since at least February 2023, a service advertised on Telegram...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A CSV injection vulnerability exists in IBM Security Guardi...

CVE-2023-42000

Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload. An unauthenticated remote attacker can exploit it to upload arbitrary files to any location on the file system where the UDP agent is installed...

CVE-2023-41998

Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacker to upload and execute arbitrary files...

Arcserve Unified Data Protection Security Vulnerability

Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection prior to version 9.2 that stems from the presence of an authentication bypass, whereby an unauthenticated, remote attacker could...

PT-2023-28210 · Ca · Arcserve Udp

Name of the Vulnerable Software and Affected Versions: Arcserve UDP versions prior to 9.2 Description: The issue allows an unauthenticated remote attacker to exploit a path traversal vulnerability in the com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload function to upload arbitrary...

Arcserve Unified Data Protection Security Vulnerability

Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions prior to 9.2 that stems from routines that allow an attacker to upload and execute arbitrary files...

Dell PowerProtect Data Manager Authorization Issues Vulnerability (CNVD-2024-3761184)

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An authorization issue vulnerability exists in Dell PowerProtect Data Manager version 19.14 and prior versions, which...