The vulnerability of the Oracle Agile PLM application, related to insufficient validation of input data, allows a hacker to disclose protected information.

The vulnerability of the Oracle Agile PLM application is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the hevc_frame_end function (libavcodec/hevcdec.c) in the FFmpeg multimedia library allows a hacker to disclose protected information.

The vulnerability of the hevcframeend function in the FFmpeg multimedia library libavcodec/hevcdec.c relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of Grub2 operating system loaders, related to the incorrect use of standard permissions, allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of Grub2 operating system loaders is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain unauthorized access to protected information...

The vulnerability of the SINEC INS network infrastructure management software lies in the use of a hard-crypted cryptographic key, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the SINEC INS network infrastructure management software is related to the use of a hard-crypted cryptographic key. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Siemens Mendix Encryption, related to the use of pre-installed data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Siemens Mendix Encryption lies in the use of pre-installed data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the virtual learning environment Moodle, related to deficiencies in the mechanism for generating error reports, allows unauthorized access by intruders to protected information.

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the iopt_area_split() function in the iommufd component of Linux operating systems allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the ioptareasplit function in the iommufd component of Linux operating systems is related to the use of memory after its release, due to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility...

The vulnerability of the `register_argc_argv` configuration in the PHP framework Laravel allows attackers to compromise the integrity of the protected information.

The vulnerability in the registerargcargv configuration in the Laravel PHP framework is related to the improper elimination of arguments separators in the command. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information from a remote location...

The vulnerability of the “Delegate my view right” function in the PDF viewer macro of the XWiki PDF Viewer Macro (Pro) allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Delegate my view right” function in the PDF viewer macro of XWiki PDF Viewer Macro Pro relates to the display of confidential information in the source code comments. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of the Simple Key-Management for Internet Protocol (SKIP) protocol implementation in the PDF viewer macro of the XWiki PDF Viewer (Pro) allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the SKIP protocol implementation in the PDF viewer macro of XWiki PDF Viewer Macro Pro relates to the improper generation of keys. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the edna Chat Center’s customer request processing system, related to improper access control, allows a violator to gain unauthorized access to protected information.

The vulnerability of the edna Chat Center’s customer request processing system is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request with a client identifier from ...

The vulnerability of the bprm_fill_uid() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bprmfilluid function in the fs/exec.c module of the Linux operating system’s kernel is related to insufficient access control due to concurrent resource access. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the vdec_close() function in the Qualcomm Venus V4L2 driver for Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vdecclose function in the drivers/media/platform/qcom/venus/vdec.c file of the Qualcomm Venus V4L2 driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of Microsoft Edge browser, related to vulnerabilities in access control for personal information, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge is related to deficiencies in restricting access to personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the fs.statfs function in the Node.js software platform allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the fs.statfs function in the Node.js software platform is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

The vulnerability of the SmartFabric OS10 network operating system, related to the use of files and directories accessible from external parties, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SmartFabric OS10 network operating system is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2024-9168 · Nextcloud +1 · Nextcloud Mail +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Mail versions prior to 1.14.6 Nextcloud Mail versions prior to 1.15.4 Nextcloud Mail versions prior to 2.2.11 Nextcloud Mail versions prior to 3.6.3 Nextcloud Mail versions prior to 3.7.7 Nextcloud Mail versions prior to 4.0.0...

The vulnerability of the peimage module in the Grub2 operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the peimage module in the Grub2 operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2025-1529 · Ibm · Ibm Sterling File Gateway

Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.5 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.1 Description: The issue is related to an observable discrepancy in request responses, which could allow an authenticated user...

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Docker Daemon software for managing Brocade SANnav networks is related to the improper assignment of permissions to a critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...