NEBOSV Flight Information System Unauthorized Access

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

TrackPoint Quick Menu Privilege Escalation

The vulnerability of the TrackPoint Quick Menu software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PERCo-Web access control system Unauthorized Access

The vulnerability of the PERCo-Web access control system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Scada-LTS Info Disclosure

The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

XWiki Confluence Migrator Pro Information Disclosure

The vulnerability of the XWiki Confluence Migrator Pro data migration tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

EcoStruxure Building Operation Enterprise Central Server Workstation Unauthorized Access

The vulnerabilities of the EcoStruxure Building Operation Enterprise Central, EcoStruxure Building Operation Enterprise Server, and the EcoStruxure Workstation interface are related to insufficient protection of operational data. Exploiting these vulnerabilities can allow unauthorized actors to...

Splunk Enterprise Unauthorized Access

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Microsoft Dynamics 365 Info Disclosure

The vulnerability of the Microsoft Dynamics 365 resource planning software relates to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

HP Color LaserJet MFP Unprotected Information Disclosure

The vulnerability of microprogrammed software in HP Color LaserJet MFP multifunctional printers is related to insufficient protection for the local address book’s service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

AutoGRAPH Web monitoring Information Disclosure

The vulnerability of the AutoGRAPH Web monitoring software platform lies in the insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted POST request...

GitLab Sensitive Data Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

AMD microprogramming software Disclosure

The vulnerability of the UMIP function in AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

AMD microprogramming software Disclosure

The vulnerability of AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

AMD microprogramming software Disclosure

The vulnerability of AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

Apache CloudStack Operational Data Protection

The vulnerability of the software platform that manages virtual machine environments in Apache CloudStack is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected...

Ruijie NBR2000G Operational Data Access

The vulnerability of the microprogrammed software of Ruijie NBR2000G, NBR1300G, and Ruijie NBR1000 lies in the insufficient protection of operational data during the processing of the /WEBVMS/LEVEL15/ endpoint. Exploiting this vulnerability can allow a malicious actor to gain access to the...

PDF Viewer Operational Data Access

The vulnerabilities of PDF viewing and editing programs such as Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, and Acrobat Reader 2020 are related to insufficient protection of sensitive data. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protecte...

FileStore::LocalStore Component Unauthorized Access

The vulnerability of the FileStore::LocalStore component in the Discourse mailing list management software is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Power Automate for Desktop Privilege Escalation

The vulnerability of the Power Automate for Desktop automation platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Booco business automation platform Auth Bypass

The vulnerability of the Booco business automation platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system and compromise the confidentiality, integrity, and...