MediaWiki Unauthorized Access

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Push Notification Component Windows Disclosure

The vulnerability of the Push Notification component in the Windows operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

rtw_wx_set_scan() Function DoS

The vulnerability of the rtwwxsetscan function in the drivers/staging/r8188eu/osdep/ioctllinux.c module, which supports additional devices in the Linux operating system, is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a servic...

Windows Management Services Information Disclosure

The vulnerability of the Windows Management Services management tool for operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Windows File Explorer Disclosure

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3 and Sequoia prior to 15.7.3, which stems from insufficient data protection and could result in access to...

Red Database Config::checkParameterValue Information Disclosure

The vulnerability of the Config::checkParameterValue function in the config.cpp module of the “Red Database” database management system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

Mattermost Sensitive Data Protection Brute Force

The vulnerability of the Mattermost instant messaging application is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack remotely...

Windows Push Notification Service Disclosure

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

NEBOSV Flight Information System Unauthorized Access

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

NEBOSV Flight Information System Unauthorized Access

The vulnerability of the Flight Information System of the NBOS is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

Mozilla Firefox Data Compromise Component Thunderbird Bypass Security Restrictions

The vulnerability of Mozilla Firefox’s Privacy component is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

libblinkapi.so Heap Buffer Overflow DoS

The vulnerability of the bsGetHostInfo function in the libblinkapi.so library, located in the /cgi-bin/lighttpd.cgi file of the LB-LINK router software, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to disclose sensitive informati...

Moodle Information Disclosure

The vulnerability in the virtual learning environment Moodle is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Jenkins Automation Server Unauthorized Access

The vulnerability of the Jenkins automation server is related to insufficient protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Zoom Video Conferencing Data Protection

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20250203-06

A vulnerability in the LibreOffice office suite is related to insufficient protection of proprietary data. Exploitation of the vulnerability could allow an attacker to disclose confidential information LibreOffice office suite vulnerability is related to incorrect path name restriction to a...

SAP Commerce Cloud Information Disclosure

The vulnerability of the SAP Commerce Cloud e-commerce platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Zoom Video Conferencing Data Protection

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Yealink Meeting Server Auth Bypass

The vulnerability of the Yealink Meeting Server lies in the insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to gain access to user authentication credentials remotely...