FrontBoard Component Unauthorized Access

The vulnerability of the FrontBoard component in iPadOS and iOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Golang Insufficient Protection Unauthorized Access

The vulnerability of the Golang programming language is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to account information...

ArcGIS Server XSS

The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Zoom Video Conferencing Data Protection

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Monitor Component Code Execution

The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely t...

Core server Component Unauthorized Access

The vulnerability of the Core server component of Oracle HTTP Server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...

PT-2025-2501 · Ibm · Ibm Watson Query

Name of the Vulnerable Software and Affected Versions: IBM Watson Query on Cloud Pak for Data IBM Data Virtualization versions 1.8 through 3.0.0 Description: The issue allows an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data...

Palo Alto Networks Expedition XSS

The vulnerability of the Palo Alto Networks Expedition configuration migration tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

GLPI XSS

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Adobe Experience Manager Code Execution

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Veeam Backup & Replication Code Execution

The vulnerability of virtual and physical systems managed by Veeam Backup & Replication is related to insufficient protection of registration data. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to execute arbitrary code...

Core server component Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the T3/IIOP protocols...

YouGile Project Management Disclosure

The vulnerability of the YouGile project management service is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Cisco Secure Firewall Management Center XSS

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow attackers to execute cross-site scripting...

MatrixClient sendSharedHistoryKeys Authentication Bypass

The vulnerability of the MatrixClient.sendSharedHistoryKeys function in the JavaScript and TypeScript matrix-js-sdk development tools is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and gain...

CVE-2024-20515

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to a lack of proper data protection mechanisms for certain configuration...

Zoom Video Conferencing Information Disclosure

The vulnerability of Zoom’s video conferencing software relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

IBM i Registration Data Code Execution

The vulnerability of the IBM i operating system and the IBM Rational Development Studio for i application suite is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code with administrator privileges...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

NVIDIA GPU Display Driver Disclosure

The vulnerability of the NVIDIA GPU Display Driver software driver is related to insufficient protection for sensitive data. Exploiting this vulnerability allows an attacker to disclose protected information...