The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the fs/ext4/dir.c module of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability in the fs/ext4/dir.c module of the Linux operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of Google Chrome’s File Picker component, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the File Picker component in the Google Chrome browser is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a hacker to disclose protected information.

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Substance 3D Stager software, a 3D design tool, arises from writing beyond buffer boundaries, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Substance 3D Stager software lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of iOS and iPadOS operating systems lies in their lack of proper access control for personal information, allowing attackers to disclose protected data.

The vulnerability of iOS and iPadOS operating systems is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of Netgear DGND3700 router’s built-in software relates to the disclosure of information that allows a hacker to compromise the protected data.

The vulnerability of Netgear DGND3700 router’s built-in software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the sub-component “Search and Register Users” of the Oracle User Management component in the Oracle E-Business Suite, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Search and Register Users” sub-component of the Oracle User Management component in the Oracle E-Business Suite system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the tarfile module in the CPython interpreter allows a attacker to compromise the integrity of the protected information.

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy (UCD) applications relates to the disclosure of information through registration files, allowing a perpetrator to disclose protected information.

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy UCD lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a perpetrator to disclose the protected information...

The vulnerability of the Admin module component in the software environment for the Zoho ManageEngine ServiceDesk Plus MSP and Zoho ManageEngine SupportCenter Plus configurations allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Admin module component in the software environment for the Zoho ManageEngine ServiceDesk Plus MSP and Zoho ManageEngine SupportCenter Plus configurations relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker operating...

The vulnerability of the Personalization component of the Oracle Applications Framework allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the Personalization component of the Oracle Applications Framework is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information usi...

The vulnerability of the recovery environment in Dell SupportAssist OS Recovery, due to insufficient protection of operational data, allows a perpetrator to disclose protected information.

The vulnerability of the recovery environment in Dell SupportAssist OS Recovery is related to insufficient protection for operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the web interface of the information system for state and municipal payments in the Republic of Tatarstan (GIS GMPl) stems from errors in the logic of the web application’s operation. This vulnerability allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the information system for state and municipal payments in the Republic of Tatarstan GIS GMPl is related to errors in the logic of the web application’s operation. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

The vulnerability of the monitoring and control tool for solar energy systems, Tigo Cloud Connect Advanced (CCA), arises from incorrect generation of session identifiers. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the monitoring and control tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the improper generation of session identifiers. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the implementation of the JSON Web Encryption (JWE) standard RFC 7516 in the Ruby programming language allows a perpetrator to disclose and modify the protected information.

The vulnerability of the JSON Web Encryption JWE RFC 7516 standard implementation in the Ruby programming language is related to improper verification of data integrity. Exploiting this vulnerability could allow an attacker to disclose and modify the protected information...

The vulnerability of the visualization plugin for the Infinity Datasource platform used in Grafana monitoring and observation systems stems from server-side request manipulation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Infinity Datasource plugin for the Grafana monitoring and observation platform relates to server-side request manipulation. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the System Settings component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the System Settings component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the API interface of the 5G HPE Aruba Networking Private 5G Core platform allows a attacker to disclose protected information.

The vulnerability of the API interface of the 5G HPE Aruba Networking Private 5G Core platform relates to the insecure storage of confidential information. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...