PT-2024-14996 · WordPress · Wp Vr

Name of the Vulnerable Software and Affected Versions: WP VR WordPress plugin versions prior to 8.3.15 Description: The issue concerns a lack of authorization and CSRF protection in a function hooked to admin init, allowing unauthenticated users to downgrade the plugin. This can lead to Reflected...

PT-2023-10175 · Corveda · Corveda Phpsandbox

Name of the Vulnerable Software and Affected Versions: Corveda PHPSandbox version 1.3.4 Description: A critical issue was found in the String Handler component, leading to protection mechanism failure. The attack can be launched remotely. Upgrading to version 1.3.5 addresses this issue...

Corveda PHPSandbox Security Breach

Corveda PHPSandbox is a PHP-based sandboxing library from Corveda. A security vulnerability exists in Corveda PHPSandbox version 1.3.4, which stems from some unknown functionality of the component String Handler that causes the protection mechanism to fail...

PT-2023-7849 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a Cross-site Scripting DOM-based XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

MetaMask: total Failure of password protection while extracting seed phrase! increases attack surface area for scammers

The MetaMask browser extension UI was able to access a user's seed phrase without requiring password confirmation, which violated expected security boundaries between the UI and background process. The issue was resolved in MetaMask Extension version 11.7.1, which now enforces password confirmati...

The vulnerability of the web interface for remote administration of TIONIX Virtual Security lies in the lack of protection for operational data, allowing attackers to obtain information about the software and current versions of the products.

The vulnerability of the web interface of the remote administration tool used for information protection in TIONIX Virtual Security is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain information abo...

CVE-2023-34984

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests...

CVE-2023-4039

DISPUTEDA failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in your application without this being detected. This stack-protector failure only applies to C99-style...

The vulnerability of the privacy modes of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of the privacy modes of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

CVE-2022-46329

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36797

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36289

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

DEBIAN-CVE-2022-36289

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-27170

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36289

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13491 · Intel · Intel Ethernet 500 Series Controller Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet 500 Series Controller drivers for VMware versions prior to 1.10.0.13 Description: The issue is related to a protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware, which may allow an...

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

CVE-2022-43435: Protection Mechanism Failure

Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

CVE-2021-33081

Protection mechanism failure in firmware for some IntelR SSD DC Products may allow a privileged user to potentially enable information disclosure via local access...

Intel(R) SSD DC 安全漏洞

IntelR SSD DC is an internal solid state drive from Intel Corporation USA. A security vulnerability exists in IntelR SSD DC Products, which stems from a failure in the firmware protection mechanism that could lead to information disclosure via local access by a privileged user...