The vulnerability of the Cisco Umbrella cloud security service’s web interface allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the Cisco Umbrella cloud security web interface is related to resource release errors. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

CVE-2023-26272

IBM Security Guardium Data Encryption IBM Guardium Cloud Key Manager GCKM 1.10.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID:...

Missing _checkAmountWithBalance check in deposit functions

Lines of code Vulnerability details Impact When computing the input or output amount of a swap checkAmountWithBalance is called to ensure that precision errors do not occur and that the pool does not lose any value. However, checkAmountWithBalance is not called in depositGivenInputAmount and...

VDA logs FAS event 107 continuously if Advyza is installed

Users cannot access Domain resources like Network shares, Internal websites, Applications which need Domain/Windows authentication after 5 minutes of logon. Users can access Domain resources soon after they logon, but if they try to access any new resource after 5 minutes, it fails or prompts for...

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises due to errors in processing hypertext links. This vulnerability allows a intruder to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the CSI Proxy component of the Kubernetes cluster management software allows a hacker to increase their privileges.

The vulnerability of the CSI Proxy component, a software tool for managing virtual machine clusters in Kubernetes, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

IBM Security Guardium Data Encryption 安全漏洞

IBM Security Guardium Data Encryption is a software from International Business Machines IBM that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files,...

PT-2025-53172

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the powerpc/iommu subsystem related to the sharing of notifiers between PCI and VIO buses. The fail iommu setup function registers the fail iommu bus...

The vulnerability of the `process.mainModule.proto.require()` function in the Node.js software platform allows a attacker to compromise the integrity of the protected information.

The vulnerability of the process.mainModule.proto.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

The vulnerability of the FUN_00010824 function in D-Link DIR-880 A1 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the FUN00010824 function in D-Link DIR-880 A1 microprogrammed router software is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failure...

StoreFront Propagate Changes not working

Running Propagation results in MMC returning "Snap-in Unavailable: This snap-in performed a non-valid operation and has been unloaded ... Exception Message: Object reference not set to an instance of an object" In event viewer, Citrix Delivery Services Admin records "Error in retrieving...

The vulnerability in the Firefox web browser, related to type conversion errors, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the OpenImageIO image processing library, which allows a hacker to trigger a service failure.

The vulnerability of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created file...

SAML Metadata Import Errors when Federation Metadata XML file is larger than 64KB

The following messages are observed at the logs: Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903432 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903433 0 : "Parsing sso url"Mar 3 15:55:42 GMT LAB01ADC1 0-PPE-0 : default AAATM Message 1903434...

The vulnerability in the Firefox web browser, related to errors during resource release, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to errors during resource release. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Content Synchronization plugin of the 389 Directory Server server allows a attacker to cause a service failure.

The vulnerability of the Content Synchronization plugin in the 389 Directory Server service is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially crafted request...

The vulnerability of the OpenImageIO image processing library, related to pointer dereferencing errors, allows a hacker to cause a service failure.

The vulnerability of the OpenImageIO image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created DDS file...

The vulnerability of the utfc_ptr2len function in the mbyte.c text editor Vim allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the utfcptr2len function in the mbyte.c text editor Vim is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, and ESET Security for Microsoft SharePoint Server allows attackers to increase their privileges.

The vulnerability of the user interface of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microso...

The vulnerability of the Windows HTML Platform component of the Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...