2009 matches found
The vulnerability in the /goform/form2lansetup.cgi microprogramming system of D-Link DIR-816 allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the /goform/form2lansetup.cgi microprogramming system of D-Link DIR-816 relates to the issue of data being written outside the buffer in memory during the processing of the IP parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...
The vulnerability of the Apache Superset data visualization software lies in the lack of measures taken to protect the SQL query structure, allowing attackers to gain unauthorized access to the protected information.
The vulnerability of the Apache Superset data visualization software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...
The vulnerability of the IBM Aspera Faspex file-sharing application, related to changes in the assumed immutable data, allows a hacker to disclose protected information and perform unauthorized actions on behalf of another user.
The vulnerability of the IBM Aspera Faspex file-sharing application is related to changes in the assumed immutable data. Exploiting this vulnerability could allow a malicious actor to disclose protected information and perform unauthorized actions on behalf of another user...
The vulnerability of the DIV_ROUND_CLOSEST() function in the Nuvoton NCT6775F circuit driver (drivers/hwmon/nct6775-core.c) in the Linux operating system allows a hacker to manipulate the accessibility of protected information.
The vulnerability of the DIVROUNDCLOSEST function in the Nuvoton NCT6775F circuit driver drivers/hwmon/nct6775-core.c in the Linux operating system is related to the occurrence of operations outside the memory buffer. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the Apache InLong data integration platform, related to deficiencies in the deserialization mechanism, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.
The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information during the processing of RTP packets...
The vulnerability of the IBM Guardium Data Protection platform regarding data security, related to the leakage of information in error messages, allows attackers to disclose protected information.
The vulnerability of the IBM Guardium Data Protection platform relates to the leakage of information in error messages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the BFCache technology used by Google Chrome and Microsoft Edge browsers allows a hacker to gain unauthorized access to protected information.
The vulnerability of the BFCache technology used by Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS allows a perpetrator to bypass the sandbox protection mechanisms and gain unauthorized access to protected information.
The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...
The vulnerability of the FtpFileObject class, a common API for accessing various file systems through Apache Commons VFS, allows attackers to gain unauthorized access to protected information.
The vulnerability of the FtpFileObject class, a common API for accessing various file systems via Apache Commons VFS, is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the MongoDB database management system, related to access control errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the MongoDB database management system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Device Admin App operating system ctrlX OS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Device Admin App on the ctrlX OS platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP requests...
The vulnerability of the multi-media library Ffmpeg, related to reading data beyond the buffer boundary in memory, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the improper assignment of permissions for critical resources, allowing attackers to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected...
The vulnerability of the Front End User Registration (sr_feuser_register) extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Front End User Registration srfeuserregister extension of the TYPO3 content management system is related to the use of a insecure direct link to an object IDOR. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the femanager extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the femanager extension of the TYPO3 content management system is related to the use of insecure direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Backup Plus (ns_backup) extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Backup Plus nsbackup extension of the TYPO3 content management system is related to errors in the access control for saved backup files and configurations. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
CVE-2024-27871
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access protected user data...