The vulnerability of the CE Phoenix e-commerce software (CE PhoenixCart) lies in the lack of authentication for a critical function, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Adobe Framemaker desktop publishing system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a specially created malicious file...

ROS-20250827-03

A vulnerability in the resolveFile method of the Apache Commons VFS Virtual File System unified API for accessing different file systems is due to errors in the relative path handling of the directory when processing the relative path of the directory. Virtual File System method is related to...

The vulnerability of container services in the Spring Framework allows attackers to gain unauthorized access to protected information.

The vulnerability of container services in the Spring Framework is related to incorrect restrictions on path names pointing to restricted directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Telnet Service component in the Tenda CP3 micro-programmed software camera allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Telnet Service component in the Tenda CP3 microprogrammable camera software is related to the use of weak credentials. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the fs/ext4/dir.c module of the Linux operating system allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability in the fs/ext4/dir.c module of the Linux operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of Google Chrome’s File Picker component, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the File Picker component in the Google Chrome browser is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the Business Chat function in the Microsoft 365 Copilot intelligent virtual assistant allows a hacker to disclose protected information.

The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Substance 3D Stager software, a 3D design tool, arises from writing beyond buffer boundaries, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Substance 3D Stager software lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of iOS and iPadOS operating systems lies in their lack of proper access control for personal information, allowing attackers to disclose protected data.

The vulnerability of iOS and iPadOS operating systems is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the sub-component “Search and Register Users” of the Oracle User Management component in the Oracle E-Business Suite, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Search and Register Users” sub-component of the Oracle User Management component in the Oracle E-Business Suite system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of Netgear DGND3700 router’s built-in software relates to the disclosure of information that allows a hacker to compromise the protected data.

The vulnerability of Netgear DGND3700 router’s built-in software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the tarfile module in the CPython interpreter allows a attacker to compromise the integrity of the protected information.

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy (UCD) applications relates to the disclosure of information through registration files, allowing a perpetrator to disclose protected information.

The vulnerability of the software for automating the deployment of IBM UrbanCode Deploy UCD lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a perpetrator to disclose the protected information...

The vulnerability of the Admin module component in the software environment for the Zoho ManageEngine ServiceDesk Plus MSP and Zoho ManageEngine SupportCenter Plus configurations allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Admin module component in the software environment for the Zoho ManageEngine ServiceDesk Plus MSP and Zoho ManageEngine SupportCenter Plus configurations relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow an attacker operating...

The vulnerability of the Personalization component of the Oracle Applications Framework allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.

The vulnerability of the Personalization component of the Oracle Applications Framework is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information usi...

The vulnerability of the recovery environment in Dell SupportAssist OS Recovery, due to insufficient protection of operational data, allows a perpetrator to disclose protected information.

The vulnerability of the recovery environment in Dell SupportAssist OS Recovery is related to insufficient protection for operational data. Exploiting this vulnerability can allow attackers to disclose protected information...