PT-2023-5968 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Autofill feature of Google Chrome, which may allow a remote attacker to bypass autofill restrictions. This can be achiev...

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SetWLanRadioSecurity function in the D-Link DIR-823G router’s microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the inspector module in the Node.js software platform allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the inspector module in the Node.js software platform is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

PT-2023-2311 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient validation of requests on the server side, which can be exploited by a remote attacker using a specially crafted HTTP request to...

The vulnerability of the implementation of the AMD Secure Processor (ASP) microprogramming software for AMD processors allows a perpetrator to influence the integrity of the protected information.

The vulnerability of the AMD Secure Processor ASP microprogramming software for AMD processors lies in insufficient data validation during the translation of input/output addresses. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

CVE-2022-41260

SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality a...

The vulnerability of D-Link COVR 1200,1202,1203 router microprogramming software is related to errors in the code of the pseudorandom number generator. This vulnerability allows attackers to compromise the integrity of the protected information.

The vulnerability of D-Link COVR 1200,1202,1203 router microprogramming software is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the Java Runtime Environment software platform arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Java Runtime Environment software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the `stream_get_meta_data` function in the PHP programming language exists due to insufficient checks on input data, allowing attackers to compromise the integrity of the information.

The vulnerability of the streamgetmetadata function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of information...

The vulnerability of the WebUI component of the Oracle Enterprise Session Border Controller allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Oracle Enterprise Session Border Controller’s WebUI component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through HTTP requests...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 2022.04.02 16:44 The POC has been optim...

The vulnerability of the Autofill function implementation in Google Chrome browsers allows attackers to compromise the integrity of the protected information.

The vulnerability of the Autofill function in Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using a specially crafted HTML page...

The vulnerability of the Telnet service in JunOS Evolved operating systems allows a perpetrator to influence the integrity and confidentiality of the protected information.

The vulnerability of the Telnet service in JunOS Evolved operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to influence the integrity and confidentiality of the protected information...

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows attackers to compromise privacy, integrity, and accessibility of information.

The vulnerability of Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Jenkins automation server, related to deficiencies in the authentication mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Apache OpenOffice office software, related to errors during the verification of signed documents, allows a perpetrator to influence the integrity of information.

The vulnerability of the Apache OpenOffice office software is related to errors during the verification of signed documents. Exploiting this vulnerability can allow an attacker to influence the integrity of information...

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS allows attackers to compromise the integrity of protected information.

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS lies in the improper assignment of permissions to files. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Autofill component in the Microsoft Edge browser allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Autofill component in the Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the macOS operating system, related to deficiencies in access control, allows attackers to compromise the integrity of protected information.

The vulnerability of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the core/admin/profil.php function in the PluXML content management system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the core/admin/profil.php function in the PluXML content management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protecte...