The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the mod_webdav.so module of the Wi-Fi router software by ASUS RT-AX92U allows a hacker to gain access to protected information.

The vulnerability of the modwebdav.so module in the ASUS RT-AX92U Wi-Fi router software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information...

The vulnerability of the “Allow Subdomains” configuration in the OAuth2 authentication platform allows a hacker to bypass security restrictions and redirect users to any arbitrary URL address.

The vulnerability of the “Allow Subdomains” configuration in the OAuth2 authentication platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and redirect users to any arbitrary URL address...

The vulnerability of the software for the design, operation, and maintenance of COMOS technological installations stems from lack of access control measures, allowing attackers to compromise data confidentiality and integrity.

The vulnerability of COMOS’ software for the design, operation, and maintenance of technological installations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of data...

The vulnerability of the Server Message Block (SMB) network protocol software used in the design, operation, and maintenance of COMOS technical installations stems from lack of access control mechanisms. This allows attackers to compromise data confidentiality and integrity.

The vulnerability of the Server Message Block SMB network protocol software used for designing, operating, and maintaining technological installations like COMOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise data...

PT-2023-7197

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to deficiencies in the deserialization mechanism of Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code, potentially...

PT-2023-6938 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authorization in some Zoom clients, which may allow an authorized user to conduct an escalation of privilege via network access. This is due to deficiencies in...

The vulnerability of the PowerScale OneFS operating system, related to insufficient resource capacity, allows a hacker to trigger a service failure.

The vulnerability of the PowerScale OneFS operating system is related to insufficient resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Wi-Fi router software of Zyxel NBG7510, related to access control deficiencies, allows a intruder to gain access to the DNS server.

The vulnerability of the Zyxel NBG7510 Wi-Fi router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to gain access to the DNS server...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication mechanisms. This allows attackers to access information about arbitrary user accounts.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to access and disclose information about arbitrary user...

The vulnerability of the SAP CommonCryptoLib library, related to deficiencies in authentication procedures, allows attackers to read, modify, or delete data with limited access.

The vulnerability of the SAP CommonCryptoLib library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to read, modify, or delete data with limited access...

The vulnerability of the EisBaer SCADA system, caused by deficiencies in the authentication process, allows a intruder to execute arbitrary commands.

The vulnerability of the SCADA system EisBaer is due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS allows attackers to escalate their privileges.

The vulnerability of the Simulator component for operating systems such as watchOS, tvOS, iPadOS, and iOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Microsoft Office software package, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Office package is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to circumvent existing security restrictions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability in the implementation of the TCP/IP protocol stack for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCP/IP protocol stack implementation in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Authentication, Authorization, and Accounting (AAA) function, as well as the SCP function of Cisco IOS and Cisco IOS XE operating systems, allows attackers to circumvent security restrictions and obtain or modify the configuration of vulnerable devices.

The vulnerability of the Authentication, Authorization, and Accounting AAA function and the SCP function of Cisco IOS and Cisco IOS XE operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and obta...

The vulnerability of the software for managing medical organizations like OpenEMR, related to lack of access control, allows a intruder to disrupt the logic of the application.

The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disrupt the logic of the application remotely...

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client (VIA) VPN service, which stems from deficiencies in access control, allows attackers to trigger a service failure.

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client VIA VPN service is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the phpcgi_main() function in D-Link DIR-645 router microprogramming software allows attackers to bypass security restrictions and gain increased privileges.

The vulnerability of the phpcgimain function in D-Link DIR-645 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...