Firebird Database Information Disclosure

The vulnerability of the client library of the Firebird database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to cause a data leak...

Cisco WebEx Meetings XSS

The vulnerability of the user interface of Cisco WebEx Meetings software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

IntraService Customer Interaction System Unauthorized Access

The vulnerability of the IntraService customer interaction system is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

AMD Xilinx Run Time security vulnerabilities

AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. AMD Xilinx Run Time suffers from a locking protection deficiency vulnerability that can be exploited by an attacker to cause reuse...

Apache OFBiz XSS

The vulnerability of Apache OFBiz’s resource planning software is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Dolibarr Events/Agenda XSS

The vulnerability of the Tittle parameter in the Events/Agenda module of the Dolibarr system, which is used for resource planning and managing relationships with customers, relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious act...

Centreon testServiceExistence() Code Execution

The vulnerability of the testServiceExistence function in the Centreon IT infrastructure monitoring software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Paragon Active Assurance demon probe_serviced Unauthorized Access

The vulnerability of the demon probeserviced testing and monitoring platform for physical, hybrid, and virtual networks of Paragon Active Assurance previously known as Netrounds is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor,...

jsoup XSS

The vulnerability of the Java library for analyzing, extracting, and managing data in HTML documents, known as jsoup, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Wi-Fi router mod_webdav.so Web Access Disclosure

The vulnerability of the modwebdav.so module in the ASUS RT-AX92U Wi-Fi router software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Windows TCP/IP Unauthorized Access

The vulnerability of the TCP/IP protocol stack implementation in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

PT-2023-4383 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows Hyper-V system, which can allow an attacker to disclose protected information. There is no information...

CVE-2023-25680

IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032...

Mac OS Data Protection Unauthorized Access

The vulnerability of Mac OS operating systems is related to deficiencies in data protection. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to protected information...

ZyXEL P-1302-T10 Router Privilege Escalation

The vulnerability of the ZyXEL P-1302-T10 v3 router’s microprogramming software is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

IBM WebSphere Portal XSS

The vulnerability of the application interface of the IBM WebSphere Portal server exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...