2026 matches found
The vulnerability in the Firefox web browser, related to the use of open redirection, allows attackers to access confidential data and compromise its integrity.
The vulnerability in the Firefox web browser is related to the use of open redirection. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity...
The vulnerability of the software for exchanging information and events between components of the IBM Security Verify Information Queue authentication and authorization system, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain access to confidential information.
The vulnerability of the information and event exchange software between the components of the IBM Security Verify Information Queue authentication and authorization system is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a malicious actor,...
The vulnerability of the software for controlling protection devices and monitoring power systems, SEL-5036 acSELerator Bay Screen Builder, is related to deficiencies in path name limitation. This allows attackers to access confidential information.
The vulnerability of the software for controlling protection devices and monitoring power systems, SEL-5036 acSELerator Bay Screen Builder, is related to deficiencies in path name limitation. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the lack of protection for the transmitted data, allowing a perpetrator to access confidential information.
The vulnerability of the IBM Aspera Faspex file-sharing application lies in the lack of protection for the transmitted data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
The vulnerability of Kepware OPC-server software from Kepware KEPServerEX and ThingWorkx Kepware Server lies in the insufficient validation of input data, allowing attackers to access confidential information.
The vulnerability of the OPC-server software from Kepware, KEPServerEX, and ThingWorkx Kepware Server, lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to access confidential information by loading any arbitrary project file...
The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, arises from the fact that confidential information is stored in unencrypted form in memory, allowing a hacker to obtain user account details.
The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, relates to the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability could allow a malicious actor to access user credentials remotely...
The vulnerability of the software for exchanging information and events between components of the IBM Security Verify Information Queue authentication and authorization system, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain access to confidential information.
The vulnerability of the information and event exchange software between the components of the IBM Security Verify Information Queue authentication and authorization system is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a malicious actor,...
Vulnerability of the CMS system: 1C-Bitrix – Website management related to authentication procedures’ flaws, allowing attackers to access confidential information and perform operations with privileged access rights of compromised accounts.
Vulnerability of the CMS system: 1C-Bitrix. Website management is associated with deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and perform operations under the privileges of a compromised account...
Siemens QMS Automotive 访问控制错误漏洞
Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive suffers from an Access Control Error vulnerability that stems from a lack of sufficient authorization checks in the QMS.Mobile module of the affected application. An...
The vulnerability of operating systems such as watchOS, iOS, and iPadOS, related to the disclosure of protected information, allows attackers to gain access to confidential data.
The vulnerabilities of operating systems such as watchOS, iOS, and iPadOS are related to the exposure of protected information. Exploiting these vulnerabilities can allow attackers to gain access to confidential information...
The vulnerability of the SICAM TOOLBOX II engineering software allows a intruder to gain access to confidential data and enhance their privileges.
The vulnerability of the SICAM TOOLBOX II engineering software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and enhance their privileges...
PT-2023-5315 · Acronis · Acronis Cloud Manager
Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to sensitive information disclosure due to unauthenticated path traversal and improper input validation. This allows a remote attacker to access...
PT-2023-5316 · Acronis · Acronis Agent +2
Name of the Vulnerable Software and Affected Versions: Acronis Agent versions prior to build 32047 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to the excessive collection of system information, which may lead to the disclosure of sensitive information...
The vulnerability of the QTS operating system’s network storage solutions on QNAP devices allows a perpetrator to gain unauthorized access to confidential data.
The vulnerability of the QTS operating system’s network storage solutions from QNAP is related to insufficient encryption strength. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data remotely...
The vulnerability of the QTS operating system’s network storage solutions on QNAP devices allows a perpetrator to gain unauthorized access to confidential data.
The vulnerability of the QTS operating system’s network storage devices in QNAP systems is related to insufficient entropy. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to confidential data...
The vulnerability of the IBM AIX operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of the IBM AIX operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...
The vulnerability of the web-server of the programmable logical controller ioLogik, related to deficiencies in access control, allows a intruder to gain unauthorized access to confidential data.
The vulnerability of the web-server-based programmable logic controller ioLogik is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential data...
The vulnerability of TP-Link Tapo L530 Wi-Fi light controller software lies in the lack of protection for sensitive data, allowing intruders to obtain confidential information.
The vulnerability of TP-Link Tapo L530 Wi-Fi bulbs’ microprogramming software is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a remote attacker to obtain confidential information...
The vulnerability of the web server of the programmable logical controller ioLogik arises from the use of cookies to store confidential information without the HttpOnly flag. This allows a violator to gain unauthorized access to the protected information.
The vulnerability of the web server of the programmable logical controller ioLogik relates to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the protected...
cups: Information leak through Cups-Get-Document operation
A vulnerability was found in OpenPrinting CUPS. Unauthorized users are permitted to fetch documents over local or remote networks, leading to confidentiality breach...