PT-2024-2972 · Sap · Sap Businessobject Business Intelligence Launch Pad

Name of the Vulnerable Software and Affected Versions: SAP BusinessObject Business Intelligence Launch Pad affected versions not specified Description: The issue is related to improper validation in SAP BusinessObject Business Intelligence Launch Pad, allowing an authenticated attacker to access...

The incognito mode of the Safari browser allows for vulnerabilities in iOS and iPadOS operating systems, enabling attackers to disclose protected information.

The vulnerability of the Incognito mode in the Safari browser on iOS and iPadOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the package manager for Kubernetes Helm, related to the lack of protection for service data, allows a attacker to influence the confidentiality of information.

The vulnerability of the package manager for Kubernetes Helm is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to influence the confidentiality of sensitive information...

The vulnerability of the Codeium-Chrome plugin, related to the lack of protection for service data, allows a hacker to send arbitrary requests to the internal filling server on behalf of another user.

The vulnerability of Codeium-Chrome is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the internal filling server on behalf of another user...

ROS-20240403-11

Vulnerability in the urllib3 module of the Python programming language interpreter is related to the lack of protection of the of service data. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information...

The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient protection of service data when processing ObjRef objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2024-5774 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server, which can be exploited by a remote attacker to gather user system information through API methods...

The vulnerability of the golang package in the Debian GNU/Linux operating system, which allows a perpetrator to access confidential information

The vulnerability of the golang package in the Debian GNU/Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information remotely...

The vulnerability in the /plugins/playbooks/api/v0/telemetry/run component of the application for instant messaging in Mattermost allows a malicious user to gain unauthorized access to information about AD/LDAP users.

The vulnerability of the /plugins/playbooks/api/v0/telemetry/run/ component in the Mattermost instant messaging application is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user...

PT-2024-2429 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue is related to an Information Exposure vulnerability that could result in a Security feature bypass, allowing an attacker to gain unauthorized access to sensitive...

PT-2024-2253 · Microsoft · Outlook For Android

Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Outlook for Android client. Exploitation of this issue may allow a remote attacker to gain...

PT-2024-2625 · Unknown · Codeium-Chrome

Name of the Vulnerable Software and Affected Versions: codeium-chrome affected versions not specified Description: The issue is related to the lack of protection for service data in the codeium-chrome plugin. An attacker can exploit this to send arbitrary requests to the internal autocomplete...

The vulnerability of the UHCI controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products allows attackers to compromise protected information.

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Task Manager module of the VitalPBX unified communication system allows a hacker to execute arbitrary commands.

The vulnerability of the Task Manager module of the VitalPBX unified communication system is related to errors in access control due to insufficient protection of service data during script processing from the /var/lib/vitalpbx directory. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the NSOpenPanel component in the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the NSOpenPanel component in the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the WindowServer component of the macOS operating system, which allows a hacker to gain unauthorized access to the user’s screen.

The vulnerability of the WindowServer component of the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the user’s screen remotely...

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

PT-2024-1883 · Microsoft · Teams For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for Android affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Teams for Android, which can allow an attacker to gain unauthorized access to protected...