2008 matches found
The vulnerability of the macOS operating system’s terminal emulator allows a hacker to disclose protected information.
The vulnerability of the macOS terminal emulator is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to execute arbitrary control commands...
The vulnerability of the NSSpellChecker spelling checking interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the NSSpellChecker spelling checker interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data, allowing attackers to disclose protected information.
The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
The vulnerability of the software protection mechanism for accessing applications in Docker environments. IBM Security Verify Access Docker, a access control system from IBM Security Verify Access, is vulnerable due to the lack of encryption measures for protected data. This allows attackers to disclose the protected information.
The vulnerability of the IBM Security Verify Access application for Docker environments stems from the lack of encryption measures for protected data. Exploiting this vulnerability can allow attackers to disclose protected information...
The vulnerability of the Dhcp6HandleAdvertiseMsg function in the Tianocore edk2 library, which allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Dhcp6HandleAdvertiseMsg function in the Tianocore edk2 library is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Report Handler component of the testing and monitoring platform for physical, hybrid, and virtual networks, Paragon Active Assurance (previously known as Netrounds), allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Report Handler component of the testing and monitoring platform for physical, hybrid, and virtual networks, Paragon Active Assurance previously known as Netrounds, is related to insufficient access control. Exploiting this vulnerability would allow a malicious actor,...
The vulnerability of the Centralized Third-party Jars component (OkHttp) of the Oracle Access Manager control system allows a hacker to disclose protected information.
The vulnerability of the Centralized Third-party Jars component OkHttp in the Oracle Access Manager access control tool is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to disclose protected information.
The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the BMC (Baseboard Management Controller) in NVIDIA’s DGX A100 server allows a intruder to gain unauthorized access to protected information.
The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the lack of measures taken to neutralize specific elements in the LDAP request. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
The vulnerability of the Message Queuing Client (MSMQC) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Message Queuing Client MSMQC on Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the HTTP-based microprogramming software service of D-Link G416 allows a hacker to gain unauthorized access to protected information.
The vulnerability of the HTTP-based microprogramming software for D-Link G416 routers lies in the insufficient handling of exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using specially created data...
CVE-2023-38612
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...
The vulnerability of the catalog-import function of the online software development platform Red Hat Developer Hub allows a hacker to disclose protected information.
The vulnerability of the catalog-import function on the online software development platform Red Hat Developer Hub is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
PT-2024-1032 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing versions affected versions not specified Description: The issue is related to insufficient protection of service data in the Message Queuing component of Windows operating systems. It allows a remote attacker to gain...
The vulnerability of the programming software for PLCs (programmable logic controllers), namely the Saia PG5 Controls Suite, arises from incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to protected information.
The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Accounts component in operating systems macOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Accounts component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Hitachi Vantara NAS network storage systems, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of Hitachi Vantara NAS network storage systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Edge Panel component of the VMware Workspace ONE Launcher’s application launcher allows a malicious individual to escalate their privileges and gain access to protected information.
The vulnerability of the Edge Panel component of the VMware Workspace ONE Launcher software lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...
The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool is related to synchronization errors when using a shared resource during port scanning. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...