DRUPAL-CONTRIB-2025-009

This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones. The module does not properly protect its custom paths, allowing one user to access a different user's two factor configuration...

The vulnerability of the SAP NetWeaver Virus Scan Interface (NW-VSI) programming integration platform for SAP NetWeaver Application Server ABAP and ABAP Platform allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver Virus Scan Interface NW-VSI software integration platform for SAP NetWeaver Application Server ABAP and ABAP Platform is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An incorrect memory address protection vulnerability exists in the Huawei HarmonyOS HUKS module, which can be exploited by an attacker to cause availability ...

PT-2025-3053 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: The issue is related to a lack of protection for sensitive data, which may allow an application to access protected user data. This proble...

The vulnerability of Intel Xeon processors relates to a flaw in the data protection mechanism, which allows attackers to enhance their privileges.

The vulnerability of Intel Xeon processors is related to a breach in the data protection mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Windows Defender Application Control (WDAC) on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the jscript9legacy.dll library in the Antimalware Scan Interface (AMSI) component of Microsoft Windows operating systems allows a malicious actor to circumvent security restrictions.

The vulnerability of the jscript9legacy.dll library in the Antimalware Scan Interface AMSI component of Microsoft Windows operating systems is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of Moxa EDS-P510 microcontroller software, related to the lack of protection for service data, allows a intruder to disclose the protected information.

The vulnerability of Moxa EDS-P510 microcontroller-based software lies in the lack of protection for service data. Exploiting this vulnerability allows an attacker to disclose protected information through Modbus MEI read requests...

Elvaco M-Bus Metering Gateway CMe3100 安全漏洞

Elvaco M-Bus Metering Gateway CMe3100 is an M-Bus metering gateway for fixed networks from Elvaco. A security vulnerability in Elvaco M-Bus Metering Gateway CMe3100 version 1.12.1, which stems from insufficient credential protection, can be exploited by an attacker to impersonate Elvaco and send ...

PT-2024-7177 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. Recommendations: At t...

The vulnerability of Microsoft Publisher software lies in its data protection mechanisms being breached, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Publisher software is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

PT-2024-6472 · Veeam · Veeam Reporter Service +1

Name of the Vulnerable Software and Affected Versions: Veeam Reporter Service affected versions not specified Description: A vulnerability exists in Veeam Reporter Service that allows an attacker to access the NTLM hash of the service account. This attack requires user interaction and data...

The vulnerability of the SCADA system MasterSCADA, related to deficiencies in data protection, allows a intruder to gain access to the project’s web server.

The vulnerability of the SCADA system MasterSCADA is related to deficiencies in data protection. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project’s web server by reverting the password hash value...

PT-2024-8893 · Intel · Intel Ethernet Network Controllers/Adapters E810 Series

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Controllers and Adapters E810 Series versions prior to 4.4 Description: The issue is related to a protection mechanism failure in the firmware of some Intel Ethernet Network Controllers and Adapters. This failure may...

The vulnerability of the RocketMQ messaging platform, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the RocketMQ messaging platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to insufficient protection of operational data, allows unauthorized access by attackers to the protected information.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to a flaw in the data protection mechanism, allows attackers to enhance their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

CVE-2024-5909

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

Tenable Network Security Nessus 安全漏洞

The Tenable Network Security Nessus Agent is a component of the Nessus Vulnerability Scanning Tool developed by Tenable to extend scanning capabilities to other devices on the network. An elevation of privilege vulnerability exists in Tenable Network Security Nessus Agent that stems from a failur...