6430 matches found
HPE Aruba Networking Fabric Composer Alter Settings
The vulnerability in the web-based management interface for network deployment and security management in HPE Aruba Networking Fabric Composer is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to remotely modify system settings...
AppleMobileFileIntegrity Privilege Escalation
The vulnerability of the AppleMobileFileIntegrity component in macOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...
Access and Security Component Privilege Escalation
The vulnerability of the Access and Security component of the Oracle Hyperion Data Relationship Management data management application relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected...
CVE-2025-22936
An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generation algorithm in WiFi routers...
Core server Component Unauthorized Access
The vulnerability of the Core server component of Oracle HTTP Server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...
Block permissions module Drupal Data Compromise
The vulnerability of the Block permissions module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Monitor Component Code Execution
The vulnerability of the Monitor component of the IBM Maximo Application Suite, a platform for managing corporate assets based on artificial intelligence, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker operating remotely t...
CVE-2022-23005
Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. The UFS Boot feature, as specified in...
CVE-2022-33233
Memory corruption due to configuration weakness in modem wile sending command to write protected files...
CVE-2022-24402
The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks...
CVE-2019-19108
An authentication weakness in the SNMP service in B Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B products via SNMP...
CVE-2020-10627
Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An...
CVE-2024-8933
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To be successful, the attacker needs to...
CVE-2025-0510
Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135...
AppleMobileFileIntegrity Access Read Modify
The vulnerability of the AppleMobileFileIntegrity component in MacOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain access to read and modify data...
Defender Sensor Man-in-the-Middle
The vulnerability of the Defender Sensor component of the IBM Storage Defender Data Resiliency Service DRS protection tool is related to improper data encryption. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” type attack...
PT-2025-3441 · Unknown · Macrozheng Mall-Tiny
Name of the Vulnerable Software and Affected Versions: Macrozheng Mall-Tiny version 1.0.1 Description: The issue is related to incorrect access control. By default, the project imports users, and a test user is granted super administrator privileges. Recommendations: For Macrozheng Mall-Tiny...
CVE-2022-28653: Undefined Security Weakness
Users can consume unlimited disk space in /var/crash...
AZL-56195 CVE-2024-10603 affecting package podman 4.1.1-26
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in some circumstances...