626 matches found
PT-2025-52554
Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1:1.39.17-1deb12u1 MediaWiki versions prior to 1:1.43.6+dfsg-1deb13u1 Description Multiple security issues were identified in MediaWiki, a website engine used for collaborative work. These issues could lead to...
The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for website structures, allows attackers to execute XSS attacks.
The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...
PT-2024-36136 · Seerox · Seerox Easy Blocks Pro
Name of the Vulnerable Software and Affected Versions: Seerox Easy Blocks pro versions 1.0.0 through 1.0.21 Description: The issue is related to missing authorization, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain features or...
Learn How Experts Secure Privileged Accounts—Proven PAS Strategies Webinar
Cybercriminals know that privileged accounts are the keys to your kingdom. One compromised account can lead to stolen data, disrupted operations, and massive business losses. Even top organizations struggle to secure privileged accounts. Why? Traditional Privileged Access Management PAM solutions...
The vulnerability of the Flow-X gas consumption controller and processor web service allows a intruder to access confidential information.
The vulnerability of the Flow-X gas consumption controller web service is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking in power, which could lead to out-of-bounds writes...
Did security gaps at Antwerp port enable drug smuggling operations?
TL;DR Why hack shipping? For profit. Criminals have been proven to have hacked port systems to bypass security and facilitate drug smuggling. Evidence of hacking? Rarely reported, but cases like MSC and Glencore’s cobalt theft and the incidents at the Port of Antwerp below provide real examples...
Online Shopping Portal dom_data_two_headers.php file cross-site scripting vulnerability
Online Shopping Portal is an online store system. Online Shopping Portal suffers from a cross-site scripting vulnerability that originates in the parameter admin/assets/plugins/DataTables/media/unittesting/templates/domdatatwoheaders.php. scripts lack effective filtering and escaping of...
The vulnerability of NVIDIA BlueField data processing processor microprogramming software, related to access control deficiencies, allows a intruder to gain unauthorized access to read and modify data, or to cause service failures.
The vulnerability of NVIDIA BlueField data processing processor microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to read and modify data, or cause service failures...
PT-2024-28135 · Avirtum · Avirtum Ipanorama 360 Wordpress Virtual Tour Builder
Name of the Vulnerable Software and Affected Versions: Avirtum iPanorama 360 WordPress Virtual Tour Builder versions 1.8.3 and earlier Description: The issue affects the Avirtum iPanorama 360 WordPress Virtual Tour Builder, allowing access to functionality not properly constrained by Access Contr...
PT-2024-30349 · Unknown · Masteriyo - Lms
Name of the Vulnerable Software and Affected Versions: Masteriyo - LMS versions 1.11.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For Masteriyo - LMS versions 1.11....
The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system allows a hacker to gain unauthorized access to read, add, modify, and delete data, or to cause a service failure.
The vulnerability of the Connector/Python driver for MySQL Connectors in the Oracle MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, add, modify, or delete data, or to cau...
PT-2024-31080 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.1 macOS Ventura versions prior to 13.7.1 macOS Sonoma versions prior to 14.7.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue allows an app to potentially access sensitive user dat...
Cisco Firepower Management Center 安全漏洞
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A cross-site scripting vulnerability exists in Cisco Firepower Management Center, which arises from insufficient validation of user-supplied input in the web management interface, and can ...
DRUPAL-CONTRIB-2024-048
This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not sufficiently protect some routes against a Cross Site Request Forgery attack. This vulnerability is mitigated by the fact that the tricked user needs to have an active session with the...
Cisco Nexus Dashboard和Nexus Dashboard Fabric Controller 安全漏洞
Cisco Nexus Dashboard and Cisco Nexus Dashboard Fabric Controller are both products of Cisco, Inc.Cisco Nexus Dashboard is a single console. The Cisco Nexus Dashboard is a single console that simplifies the operation and management of data center networks.The Cisco Nexus Dashboard Fabric Controll...
The vulnerability of the `WebCore::RenderLayer::repaintBlockSelectionGaps` function in WPE WebKit and WebKitGTK rendering modules allows a attacker to execute arbitrary code.
The vulnerability of the WebCore::RenderLayer::repaintBlockSelectionGaps function in WPE WebKit and WebKitGTK rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Intel Microcode processors lies in their lack of access control mechanisms. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Intel Microcode processors lies in access control deficiencies. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Twisted web framework, related to the lack of protective measures for website structures, allows attackers to access confidential data and compromise its integrity.
The vulnerability of the Twisted web framework is related to the lack of security measures for website structures. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...
