The vulnerability of the core_table/dynamic module in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the coretable/dynamic module in the virtual learning environment Moodle is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Zyxel P-6101C router microprogramming software, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of Zyxel P-6101C router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted HTTP request...

PT-2024-9865 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 11.4.7 and earlier Adobe Connect version 12.6 Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this...

The vulnerability of the Microprogrammed Software for the Avigilon VideoIQ iCVR HD camera, related to incorrect restrictions on the path name to the restricted access directory, allows a violator to disclose protected information.

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the Automatic ConfigProvider component of the Apache Kafka messaging broker allows a hacker to disclose protected information.

The vulnerability of the Automatic ConfigProvider component in the Apache Kafka messaging broker is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information that should be protected...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE is related to deficiencies in the authentication mechanism. This allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the use of memory after it is freed, allowing an attacker to disclose protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of Doc objects. Exploiting this vulnerability can allow ...

The vulnerability of the xe_vm_create_ioctl() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xevmcreateioctl function in the drivers/gpu/drm/xe/xevm.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to deficiencies in access control. This vulnerability allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the graphical tool for creating and supporting artificial intelligence in Microsoft Copilot Studio, related to the disclosure of information, allows unauthorized access to protected information.

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of the functions nf_flow_offload_inet_hook() and nf_flow_skb_encap_protocol() in the netfilter component of the Linux operating system allow attackers to compromise the confidentiality and accessibility of protected information.

The vulnerabilities of the functions nfflowoffloadinethook in the net/netfilter/nfflowtableinet.c module and nfflowskbencapprotocol in the net/netfilter/nfflowtableip.c module of the Linux kernel’s netfilter component are related to the use of memory beyond the allocated buffer. Exploitation of...

The vulnerability of Adobe Audition’s audio editor lies in the ability to read data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of Zendesk’s customer service and sales software, related to improper authorization, allows a hacker to disclose protected information.

The vulnerability of Zendesk’s customer service and sales software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Dawn component in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Dawn component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to improper storage of permissions, allows attackers to influence the confidentiality of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper storage of permissions. Exploiting these vulnerabilities can allow remote attackers to influence the confidentiality of protected information...

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices allows attackers to influence the confidentiality and accessibility of the protected information.

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality and accessibility of the protected...

The vulnerability of the SMTP Server Credential Handler component in HP DesignJet printers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SMTP Server Credential Handler component in HP DesignJet printers is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to trigger a service failure and expose the protected information.

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

The vulnerability of the Trend Micro Antivirus One antivirus protection tool for MacOS systems is related to deficiencies in access control, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Trend Micro Antivirus One antivirus protection software for MacOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the RAPL Interface microprogramming software for Intel processors lies in the ability to disclose information through incompatibility, allowing attackers to compromise the protected information.

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...