SAP REST Provider Definition Response Unauthorized Access

The vulnerability of the REST Provider Definition Response component in SAP system management software is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Operational Data Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read, modify, or delete access to data...

TrueConf Server Information Disclosure

The vulnerability of the TrueConf Server software is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to obtain information about system users by sending a specially crafted API request...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

MySQL Server Telemetry Unauthorized Access

The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...

SAP Commerce Cloud Information Disclosure

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

FortiSandbox Graphical Interface Unauthorized Access

The vulnerability of the FortiSandbox threat detection and mitigation graphical interface is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially...

Cisco Duo Epic for Hyperdrive Operational Information Disclosure

The vulnerability of the Cisco Duo Epic for Hyperdrive implementation software lies in the insufficient protection of sensitive data. Exploiting this vulnerability could allow attackers to disclose confidential information...

Yealink Meeting Server Operational Data Access

The vulnerability of the Yealink Meeting Server video conference service is related to insufficient protection for sensitive data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to user credentials...

TrueConf Server Information Disclosure

The vulnerability of the TrueConf Server software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor to gather information about system users through API methods...

TD-2104TS-CL Operational Information Disclosure

The vulnerability of the software on hybrid HD video recorders such as TD-2104TS-CL, TD-2108TS-HP, TD-2116TE-HP, AV108T, SH-4050A5-5LMM, and SH-8100A-2LMM lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected...

FortiAIOps Disclosure Protected Information

The vulnerability of the graphical user interface of the artificial intelligence-based security threat detection software FortiAIOps is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information stored in...

UMI CMS Unauthorized Access

The vulnerability of the multi-site content management system UMI CMS is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

GitLab Sensitive Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of operational data when processing query parameters. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending special...

RocketMQ Operational Data Access

The vulnerability of the RocketMQ messaging platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

DuckDB sniff_csv() Unauthenticated Access Disclosure

The vulnerability of the sniffcsv function in the DuckDB database management system is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

MicroLogix 1400 PLC Operational Data Access

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

MicroLogix 1400 PLC Operational Data Protection

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability could allow attackers to install unauthorized software...

MicroLogix 1400 PLC Operational Data Access

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

Microsoft Outlook Operational Data Protection Spear Phishing

The vulnerability of the Microsoft Outlook email client is related to insufficient protection for administrative data. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...