The vulnerability of the Jenkins MSTeams Webhook Trigger Plugin, related to the disclosure of information, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Jenkins MSTeams Webhook Trigger Plugin is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Gogs Plugin, related to the disclosure of information, allows a malicious actor to gain unauthorized access to the protected information.

The vulnerability of the Jenkins Gogs Plugin is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins lambdatest-automation plugin, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins lambdatest-automation Plugin is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Lightdash data visualization and analysis tool lies in the improper restriction of the path name to the restricted access catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Lightdash data visualization and analysis tool is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to the lack of protection for service data, allowing a perpetrator to disclose protected information.

The vulnerability of Microsoft Edge based on Chromium is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Core component of the WebLogic Server software allows a perpetrator to gain access to protected information.

The vulnerability of the Core component of the WebLogic Server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of protection for operational data, which allows a intruder to disclose the protected information.

The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

ROS-20231024-02

A vulnerability in the xrdppainter.c component of the XRDP server is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to protected information information...

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS allows a hacker to disclose protected information.

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS is related to the lack of checks for the validity of incoming requests. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this system...

The vulnerability of the Web Listener component of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the library for working with image files, libXpm, related to a read-out error beyond the memory boundaries, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the libXpm library for working with image files is related to a read access exception that occurs beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20231018-02

The libXpm image file library vulnerability is related to a read error call outside of memory boundaries. outside of memory boundaries. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2023-6561 · Zchunk +4 · Zchunk +4

Name of the Vulnerable Software and Affected Versions: zchunk versions prior to 1.3.2 Description: The issue is related to integer overflows in components such as lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. This can be exploited via malformed zchunk files,...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing attackers to exploit it to disclose sensitive information that is protected by security measures.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service-related data. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the xfrm_dump_sa() function in the net/xfrm/xfrm_user.c module of the XFRM subsystem in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the xfrmdumpsa function in the net/xfrm/xfrmuser.c module of the XFRM subsystem in the Linux operating system is related to reading beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information...

PT-2023-6373 · Wago · Wago

Name of the Vulnerable Software and Affected Versions: Wago products affected versions not specified Description: The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than...

The vulnerability in the Windows operating system’s power management service allows attackers to exploit it to disclose protected information.

The vulnerability of the Windows operating system’s power management service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Share Sheet component in operating systems such as watchOS, iPadOS, iOS, and macOS allows a hacker to disclose protected information.

The vulnerability of the Share Sheet component in operating systems such as watchOS, iPadOS, iOS, and macOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose sensitive information...