The vulnerability of the Hitachi Ops Center Administrator software, related to insufficient protection of registration data, allows a perpetrator to disclose protected information.

The vulnerability of the Hitachi Ops Center Administrator software for data storage infrastructure management is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the Dubai Module of the HarmonyOS operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Dubai Module of the HarmonyOS operating system relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise privacy...

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server lies in the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorize...

The vulnerability of the Mendix software deployment and application testing platform, related to the ability to bypass authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the Mendix software deployment and application testing platform relates to the bypassing of authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information, or to enhanc...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to the use of a rigidly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.

The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an unauthorized actor to gain unauthorized access to protected information...

The vulnerability of the IBM Security Directory Server software lies in the improper limitation of XML references to external objects. This allows attackers to influence the confidentiality and accessibility of the protected information.

The vulnerability of the IBM Security Directory Server data storage and management software is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow an attacker to influence the confidentiality and accessibility of the protected information...

The vulnerability of Siemens OPC UA Modeling Editor (SiOME) relates to incorrect restrictions on XML references to external objects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Siemens OPC UA Modeling Editor SiOME is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability of the SQL Query component of the microprogramming software for the programmable access controller SmartGard Silver with Matrix Keyboard allows a intruder to disclose protected information.

The vulnerability of the SQL Query component of the microprogramming system used in SmartGard Silver access controllers with matrix keyboards is related to the transmission of critical information in open text. Exploiting this vulnerability could allow a malicious actor to disclose the protected...

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, arises due to an incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, is related to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the nf_conntrack_dccp_packet() function in the net/netfilter/nf_conntrack_proto_dccp.c module of the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the nfconntrackdccppacket function in the net/netfilter/nfconntrackprotodccp.c module of the Linux kernel is related to the escape of allocated memory from the protected area. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the nft_trans_gc_catchall() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the nfttransgccatchall function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `qxl_gem_object_create_with_handle()` function in the `drivers/gpu/drm/qxl/qxl_gem.c` file of the Linux operating system’s kernel driver QXL allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qxlgemobjectcreatewithhandle function in the drivers/gpu/drm/qxl/qxlgem.c driver of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of Zoom’s video conferencing software, related to the implementation of incorrect control flow, allows attackers to gain access to protected information.

The vulnerability of Zoom video conferencing software is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the software tool for processing and managing financial transactions conducted through the SWIFT international messaging system allows a perpetrator to disclose protected information or compromise the accessibility of that information, due to incorrect restrictions on XML links to external objects in the IBM Financial Transaction Manager for SWIFT Services.

The vulnerability of the software tool for processing and managing financial transactions conducted through the SWIFT messaging system is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected...

PT-2023-7432 · Microsoft +1 · Windows Powershell +1

Name of the Vulnerable Software and Affected Versions: Windows PowerShell affected versions not specified Description: The vulnerability is related to errors in the authentication procedure of the Windows operating system's PowerShell interpreter. Exploitation of this issue may allow a remote...

The vulnerability of the Apache Airflow network software lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Airflow network software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the modoboa/modoboa mail server, related to the manipulation of inter-site requests, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the modoboa/modoboa mail server is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system allows a hacker to disclose protected information.

The vulnerability of the param.file.tgz file of the Backup Handler component in the Netis Netcore microprogramming system lies in the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for operational data, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...