1610 matches found
PT-2025-1164 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Kerberos protocol implementation in Windows, which is associated with insufficient protection of service data. This can allow a remote attacker to disclose...
PT-2025-1112 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the MapUrlToZone method in Windows operating systems, which is associated with incorrect path equivalence resolution. This can allow a remote attacker to disclose...
PT-2025-1102 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability, specifically concerning the MapUrlToZone method in Windows operating systems. This vulnerability is associated with incorrec...
Advisory ROSA-SA-2025-2566
software: x11-server 1.20.14 OS: ROSA-CHROME packageevrstring: x11-server-1.20.14-6 CVE-ID: CVE-2023-6377 BDU-ID: 2024-00457 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the xorg-x11-server package is related to the use of memory after it has been freed when processing Button Action objects...
Vulnerability of web-based interfaces for microprogramming systems: Wi-Fi routers such as Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360 allow attackers to disclose protected information.
The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, is related to insufficient protection for sensitive data. Exploiting this...
The vulnerability of IBM WebSphere Application Server Liberty and IBM WebSphere Application Server arises from incorrect restrictions on XML references to external objects, which allows attackers to disclose sensitive information.
The vulnerability of IBM WebSphere Application Server Liberty and IBM WebSphere Application Server is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...
CVE-2025-0298
A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...
PT-2025-3796
Name of the Vulnerable Software and Affected Versions Tsinghua Unigroup Electronic Archives System version 3.2.21080262532 Description A problematic issue has been found in the Tsinghua Unigroup Electronic Archives System, affecting the function download of the file /collect/PortV4/downLoad.html...
IBM Cognos Analytics 安全漏洞
IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A security...
The vulnerability of the software for controlling the Geovision GV-ASManager system lies in the absence of an authentication procedure, which allows a intruder to disclose the protected information.
The vulnerability of the software for controlling the Geovision GV-ASManager access control system is related to the absence of an authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in errors in processing the relative path to the catalog, allowing an attacker to disclose protected information.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow an attacker to disclose protected information...
Geovision GV-ASManager 安全漏洞
Geovision GV-ASManager is a network access control solution from Geovision for small businesses and multinational corporations with facilities worldwide. A security vulnerability exists in Geovision GV-ASManager versions prior to 6.1.1.0 that stems from a lack of authorization and allows a remote...
The vulnerability of NextCloud Mail’s email client, related to improper access control, allows attackers to disclose protected information.
The vulnerability of NextCloud Mail’s email client stems from insufficient access control. Exploiting this vulnerability allows a malicious actor to disclose protected information from a remote location...
The vulnerability of NextCloud Mail’s email client allows unauthorized individuals to disclose confidential information, enabling attackers to expose protected data.
The vulnerability of NextCloud Mail’s email client stems from improper automatic configuration. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...
PT-2024-10654 · Bluetooth · Bluetooth
Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible information disclosure due to uninitialized data in the gatts process read by type req function of gatt sr.c. This could lead to remote information...
The vulnerability of SAP NetWeaver Java Application Server web applications lies in the improper use of standard permissions, which allows attackers to disclose protected information.
The vulnerability of SAP NetWeaver Java Application Server web applications is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE involves exposing system data that is not authorized to be accessible within the controlled area. This allows attackers to disclose protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the disclosure of system data that is not accessible to authorized personnel in the controlled area. Exploiting this vulnerability could allow an intruder, operating remotely, to...
CVE-2017-13319
In pvmp3getmaindatasize of pvmp3getmaindatasize.cpp, there is a possible buffer overread due to a missing bounds check. This could lead to remote information disclosure of global static variables with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2024-10589 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible buffer overread in the pvmp3 get main data size function due to a missing bounds check. This could lead to remote...
