The vulnerability of the CORS mechanism implementation in Google Chrome browsers allows a hacker to gain access to confidential data.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to data leaks from various sources. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the networking.c component of the Redis database management system allows a hacker to gain access to confidential data.

The vulnerability of the networking.c component of the Redis database management system is related to the allowance for “interprotocol scenarii,” as there is no checking of POST and Host: fields. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through...

The vulnerability of the access control service for remote catalogs and the authentication mechanism sssd, related to the disclosure of information, allows a perpetrator to gain access to confidential data.

The vulnerability of the access control service for remote catalogs and the authentication mechanism of sssd involve revealing information that allows reading of sudo rules, which are accessible to any user. Exploiting this vulnerability could enable a malicious individual to gain access to...

The vulnerability of the dynamically linked CrossCadWare_x64.dl library, a toolset for design and simulation in Siemens Solid Edge, allows a hacker to disclose confidential information.

The vulnerability of the dynamically linked CrossCadWarex64.dl library, which is used for design and simulation projects by Siemens Solid Edge, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to disclose confidential informatio...

The vulnerability of the dynamically linked CrossCadWare_x64.dl library, a toolset for design and simulation in Siemens Solid Edge, allows a hacker to disclose confidential information.

The vulnerability of the dynamically linked CrossCadWarex64.dl library, which is used for design and simulation projects by Siemens Solid Edge, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to disclose confidential informatio...

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from the lack of protective measures for SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

PT-2023-7990 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to a lack of protection of the web page structure in Zabbix, allowing a remote attacker to access and compromise confidential data. This is a reflected XSS attack, also...

PT-2023-7992 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to reflected XSS attacks, which occur when a malicious script is reflected off a web application to the victim's browser. The script can be activated through Action form...

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from the lack of measures taken to protect the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

PT-2023-7991 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the URL validation scheme in Zabbix, which receives input from a user and parses it to identify its various components. The validation scheme can ensure that all URL...

CVE-2023-27465

A vulnerability has been identified in SIMOTION C240 All versions = V5.4 = V5.4 = V5.4 = V5.4 = V5.4 = V5.4 = V5.4 = V5.4 = V5.4, SIMOTION D445-2 DP/PN All versions = V5.4 = V5.4 = V5.4, SIMOTION P320-4 S All versions = V5.4. When operated with Security Level Low the device does not protect acces...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to gain access to confidential data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to reading data from buffers beyond the allowed limits. Exploiting this vulnerability allows a malicious actor to gai...

PT-2023-4247 · Sap · Sap Hybris Commerce +1

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud versions HY COM 2105, HY COM 2205, COM CLOUD 2211 SAP Hybris Commerce versions HY COM 2105, HY COM 2205 Description: The issue is related to the implementation of the Omni Commerce Connect OCC API in SAP Commerce Cloud and...

CVE-2023-1711

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication to the network elements. If exploited an attacker could obtain confidential information. List of CPEs: cpe:2.3:a:hitachienergy:foxmanun:R9C:::::::...

PT-2023-3037 · Honeywell · Honeywell Onewireless

Name of the Vulnerable Software and Affected Versions: Honeywell OneWireless version 322.1 Description: The issue is related to the use of insufficiently random values in Honeywell OneWireless, which may allow a remote attacker to manipulate claims in a client's JWT token, potentially gaining...

The vulnerability of the built-in software of the ARIS controller, related to the disclosure of confidential information, allows a perpetrator to gain access to critical data.

The vulnerability of the built-in software of the ARIS controller relates to the exposure of confidential information. Exploiting this vulnerability could allow a remote attacker to gain access to critical information...

PT-2023-8824 · Unem +1 · Unem +1

Name of the Vulnerable Software and Affected Versions: FOXMAN-UN versions R9C through R16A UNEM versions R9C through R16A Description: A vulnerability exists in the FOXMAN-UN and UNEM logging component, affecting systems that use remote authentication to the network elements. If exploited, an...

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to deficiencies in path name restriction, allows a intruder to access confidential data.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to deficiencies in name-based path restrictions. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the 389 Directory Server’s authentication process, related to incorrect session duration, allows attackers to gain access to confidential data.

The vulnerability of the 389 Directory Server’s authentication service is related to an incorrect session duration. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of the command-line interface of the Network Manager program, which is used to manage network connections, allows a attacker to gain access to confidential data.

The vulnerability of the nmcli command-line interface for managing network connections involves incorrect settings during the creation of a new profile. Exploiting this vulnerability allows an attacker to gain access to confidential data...