23 matches found
Aquarius L311 Driver Access Control
The vulnerability of the Aquarius L311 device’s driver for the Avora operating system is related to access control errors. Exploiting this vulnerability can allow attackers to gain access to protected information and affect the system...
Loader Component Protected Information Access
The vulnerability of the Loader component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Extensions Component Protected Information Access
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to gain access to protected information...
Google Chrome Microsoft Edge Information Disclosure
The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...
AppArmor d_namespace_path Path Traversal
The vulnerability of the dnamespacepath function in the security/apparmor/path.c module of the AppArmor security component for the Linux operating system is related to insufficient data structure validation. Exploiting this vulnerability could allow an attacker to access protected information or...
Zabbix IT-infrastructure monitoring system Password Storage Unencrypted
The vulnerability of the Zabbix IT-infrastructure monitoring system lies in the storage of passwords in an unencrypted form. Exploiting this vulnerability allows a malicious actor to gain access to protected information...
Extensions Component Unauthorized Access
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20250403-10
Vulnerability in the Rack::Static class of the modular interface between web servers and Rack web applications is related to with errors in relative directory path handling. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected informat...
ROS-20250402-06
Vulnerability of pamsmauthenticate function of PAM-PKCS11 authentication module of Linux operating systems is related to authentication errors. Exploitation of the vulnerability could allow an attacker acting remotely, bypass the authentication procedure and gain unauthorized access to protected...
ROS-20250326-03
The vulnerability in the document-oriented database management system MongoDB is related to bugs in the query analysis of some complex self-referential $lookup subconvectors, leading to sending to the server literal values in expressions for encrypted fields as plaintext instead of encrypted text...
PDF Memory Management Unauthorized Access
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed during the processing of AcroForms forms. Exploiting this...
Flask Cookie Session Disclosure
The vulnerability of the Flask framework lies in the ability to send a session cookie file from one client to other users. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information...
Elastic Cloud Enterprise analytics Platform Access Disclosure
The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...
Advantech WebAccess Info Disclosure
The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...
Apache Tomcat HTTP Request Interpretation Data Compromise
The vulnerability of the Apache Tomcat application server is related to the inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of the protected information...
Primavera Portfolio Management Web Server Privilege Escalation
The vulnerability of the Web Server component of the Primavera Portfolio Management software for automating production processes exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to...
RDP Clients Windows Unauthorized Access
The vulnerability of RDP clients on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially created application...
Xen Project XSA-240 Mitigation Shadow Paging Conflict Vulnerability (XSA-280)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a vulnerability allowing a guest system to potentially elevate privileges, access protected information, and perform a DoS against the host. A number of caveats exist to determine if a...
Debian GNU/Linux Remote Compromise Protected Information
Multiple vulnerabilities exist in the libruby1.8 package of the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...