Janitza UMG Information Disclosure

The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to information about the...

iOS Information Disclosure

The vulnerability of the Apple Pay component in the iOS operating system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, acting remotely, to gain access to sensitive information about ongoing payments by reviewing log files...

iOS iCloud Access

The vulnerability of the CloudKit component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to an iCloud account through a specially crafted application...

Mac OS X Arbitrary Notification Read

The vulnerability of the Notification Center component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary notifications using a specially crafted application...

LifeCare PCA Infusion System Access

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the device...

Moodle Account Access

The vulnerability of the login/confirm.php sub-component of the Moodle learning management system is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user account information during attemp...

Adobe AIR Access Restriction Bypass

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

PT-2007-3717 · Unknown · Script.Aculo.Us

Name of the Vulnerable Software and Affected Versions: Script.aculo.us affected versions not specified Description: The issue allows remote attackers to obtain data through a web page that retrieves the data using JavaScript Object Notation JSON without protection. This is achieved by capturing t...

CVE-1999-1430: Undefined Security Weakness

PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb Microsoft Access file, which allows local users to read the data without a password by directly accessing the files with a different application, such as Access...

DST2K0035.txt

============================================================================ Delphis Consulting Plc ============================================================================ Security Team Advisories 22/09/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...