The vulnerability of the SIMATIC Reader software for editing and managing projects and documents allows a perpetrator to trigger a service failure and expose the protected information.

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

The vulnerability of the filemap_fault_recheck_pte_none() function in the Linux kernel’s memory management subsystem allows an attacker to compromise the integrity of protected information.

The vulnerability of the filemapfaultrecheckptenone function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to the repeated use of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an...

The vulnerability of the RAPL Interface microprogramming software for Intel processors lies in the ability to disclose information through incompatibility, allowing attackers to compromise the protected information.

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of SAP BusinessObjects Business Intelligence’s Web Intelligence component relates to the unlimited download of dangerous files. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the splunkd component of the Splunk Enterprise platform for operational analytics allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the splunkd component of the Splunk Enterprise platform for operational analytics is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Vulnerability of the MySQL Server component: The Telemetry feature of the MySQL Server management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in representing specified functions, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in representing certain functions. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the fuse_notify_store() function in the file system of the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the fusenotifystore function in the fuse file system module of the Linux kernel’s device drivers is related to memory allocation beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protecte...

The vulnerability of the application programming interface WebAuthn in browsers Google Chrome and Microsoft Edge allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Application Programming Interface WebAuthn of Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source and Adobe Commerce stems from lack of access control mechanisms. This allows attackers to bypass security measures and gain unauthorized access to protected information.

The vulnerability of software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to bypass security measures and gain unauthorized access to protected informatio...

The vulnerability of the application programming interface of the Avanpost IDM system lies in the insufficient verification of access rights to objects within the application. This allows a perpetrator to gain access to protected information.

The vulnerability of the application programming interface of the Avanpost IDM system relates to insufficient verification of access rights to objects within the application. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader (formerly Foxit Reader), allows a perpetrator to disclose protected information.

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader formerly Foxit Reader, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a...

The vulnerability of the mv88e6xxx.default_mdio_bus() function in Marvell 88E6xxx device driver for Linux operating systems allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the mv88e6xxx.defaultmdiobus function in the drivers/net/dsa/mv88e6xxx/chip.c file of the Marvell 88E6xxx device driver in the Linux operating system is related to improper checking of the list. Exploiting this vulnerability could allow an attacker to compromise the integrity...

The vulnerability of the JetBrains YouTrack project management and task management software, related to insufficient protection of registration data, allows a hacker to gain unauthorized access to the protected information.

The vulnerability of the JetBrains YouTrack project and task management software is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2024-6711

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Microsoft Edge affected versions not specified Description: The issue is related to incorrect security checks for standard elements in the V8 JavaScript engine handler. This could allow a remote...

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created HTML page...