The vulnerability of the IBM Robotic Process Automation software lies in its insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

JSA10589 - 2013-09 Security Bulletin: Pulse Connect Secure (PCS): Multiple cross site scripting issues

Last Modified Date Aug 24, 2026 12:35:00 AM...

CVE-2023-23697

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

PT-2023-13409 · Dell · Powerpath Management Appliance

Name of the Vulnerable Software and Affected Versions: PowerPath Management Appliance versions 3.2 through 3.3 Description: The issue allows authenticated admin users to exploit a Hardcoded Cryptographic Keys problem, leading to the ability to view and modify sensitive information stored in the...

Apache HTTP Server CLRF Injection Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A CLRF injection vulnerability exists in Apache HTTP Server versions prior to 2.4.55. The vulnerability stems from a Web applicati...

Exploit for Improper Input Validation in Cisco Ios

Cisco-Smart-Exploit Cisco SmartInstall Exploit CVE-2018-0171...

Vulnerability of the web interface of the Cisco IOS XE operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the Cisco IOS XE operating system’s web interface exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2023-53468)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

CVE-2022-41290 IBM AIX privilege escalation

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rmrlcachefile command to obtain root privileges. IBM X-Force ID: 236690...

CVE-2022-25929 Cross-site Scripting (XSS)

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

Design/Logic Flaw

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46318

The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings...

CVE-2022-46314

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46318

The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings...

The vulnerability of the Windows Graphics Component, which allows a hacker to disclose protected information on Windows operating systems

The vulnerability of the Windows Graphics Component relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2022-14751 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: The issue is related to a side channel information disclosure in the getSmsRoleHolder function of RoleService.java. This could allow an attacker to determine whether an app is installed without requiring query...

PT-2022-5863 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft Office Graphics component, allowing an attacker to execute arbitrary code using a specially...

DEV-0139 launches targeted attacks against the cryptocurrency industry

Over the past several years, the cryptocurrency market has considerably expanded, gaining the interest of investors and threat actors. Cryptocurrency itself has been used by cybercriminals for their operations, notably for ransom payment in ransomware attacks, but we have also observed threat...

Arbitrary File Read Vulnerability in Macroview HCM Human Resource Management System

Beijing Hongjing Century Software Co., Ltd "Hongjing Software" focuses on the research, development and application promotion of human resources and talent management digitalization digitalization and intelligence products for state-owned enterprises and institutions. There is an arbitrary file...