Upgraded Q -> M from 417 [1657853118593]

Judge has assessed an item in Issue 417 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> M from 277 [1657879283610]

Judge has assessed an item in Issue 277 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

PT-2025-8538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue concerned the igc driver, which did not properly implement checks for PCIe link flaps or PCI bus errors, leading to...

IBM Engineering Lifecycle Optimization security vulnerabilities

IBM Engineering Lifecycle Optimization ELO is an extension of the Engineering Lifecycle Management ELM portfolio from IBM America. They make it easier to collect and analyze data across the development environment to make better decisions. Automate reporting to ensure the entire organization has...

ROS-20220714-02

A vulnerability in the passdb account database of the Dovecot mail server is related to errors in the configuration. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...

Mendix Database Disclosure

The vulnerability of the software platform for deploying and testing Mendix application programs is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Adobe Acrobat and Adobe Reader resource management vulnerabilities

Adobe Acrobat and Adobe Reader are both Adobe products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader are vulnerable to resource management errors. Adobe Acrobat and Adobe Reader are vulnerab...

Adobe Acrobat and Adobe Reader resource management vulnerabilities

Adobe Acrobat and Adobe Reader are the United States of America Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader there are resource management error...

Adobe Acrobat and Adobe Reader resource management vulnerabilities

Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. A number of Adobe resource management error vulnerability, the vulnerability arises from the processing of PDF files exist after the release of reuse error, the attacker uses t...

Adobe Acrobat and Adobe Reader resource management vulnerabilities

Adobe Acrobat and Adobe Reader are both Adobe products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader are vulnerable to resource management errors. Adobe Acrobat and Adobe Reader are both Ado...

Adobe Acrobat and Adobe Reader resource management vulnerabilities

Adobe Acrobat and Adobe Reader are both Adobe products. Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Adobe Acrobat and Adobe Reader are vulnerable to resource management errors. Adobe Acrobat and Adobe Reader are vulnerab...

Adobe Reader DC Continuous Security Update (APSB22-32) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

Adobe Acrobat 2017 Security Update (APSB22-32) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

PT-2022-4075 · Microsoft · Windows Connected Devices Platform Service +1

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service CDPSvc affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Connected Devices Platform Service CDPSvc of Windows operating...

Valinor security vulnerabilities

Valinor is a PHP library that helps map any input to a strongly typed value object structure. A security vulnerability exists in Valinor versions prior to 0.12.0, which stems from the fact that Valinor can be used without privileges to, for example, display SQL exceptions for SQL fragments, displ...

Dovecot Passdb Privilege Escalation

The vulnerability of the Dovecot mail server’s passdb database account database is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Cisco Expressway Series Telepresence VCS Man-in-the-Middle

The vulnerability of Cisco Expressway Series and Cisco Telepresence VCS conference control devices is related to errors in the authentication process for certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

Oracle data feeds are insufficiently validated

Lines of code Vulnerability details Impact If the oracle price feeds are insufficiently validated, there will be pricing errors leading to the miss-pricing of assets Proof of Concept The JBSingleTokenPaymentTerminalStore and abstract JBPayoutRedemptionPaymentTerminal both rely on their respective...

PT-2022-6930 · Eclipse · Eclipse Jetty

Name of the Vulnerable Software and Affected Versions: Eclipse Jetty versions 10.0.0 through 10.0.9 Eclipse Jetty versions 11.0.0 through 11.0.9 Description: The issue is related to the SslConnection component of the Eclipse Jetty servlet container, which is associated with resource release error...

WWebView Component Privilege Escalation

The vulnerability of the categoryId parameter in the WWebView component of the MCE Systems lifecycle management system is related to errors in link processing before accessing a file, as well as deserialization of the PendingDynamicLinkData structure from the Intent Extra array with the key...