NextCloud Mail Improper Access Disclosure

The vulnerability of NextCloud Mail’s email client stems from insufficient access control. Exploiting this vulnerability allows a malicious actor to disclose protected information from a remote location...

NextCloud Mail Disclosure

The vulnerability of NextCloud Mail’s email client stems from improper automatic configuration. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

SailPoint IdentityIQ File Name Handling

The vulnerability of the comprehensive solution for managing user identification, access rights, and compliance with SailPoint IdentityIQ is related to incorrect handling of file names. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...

Linux macsec_free_netdev Buffer Overflow DoS

The vulnerability of the macsecfreenetdev function in the drivers/net/macsec.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

OMRON CX-Motion Pro XXE

The vulnerability of the OMRON CX-Motion Pro controller management program is related to an improper restriction on references to external XML entities XXE. Exploiting this vulnerability may allow a perpetrator to access protected information through a specially created project file...

PHP enum_func_status Function Unauthenticated Access

The vulnerability of the static enumfuncstatus phpmysqlndrsetfieldread function in the PHP programming language is related to insufficient protection of sensitive data due to the operation being performed outside the buffer in memory. Exploiting this vulnerability could allow an attacker, operati...

Moodle core_table/dynamic Module Unauthorized Access

The vulnerability of the coretable/dynamic module in the virtual learning environment Moodle is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Zyxel P-6101C Router Authentication Bypass

The vulnerability of Zyxel P-6101C router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a specially crafted HTTP request...

PT-2024-9865 · Adobe · Connect

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 11.4.7 and earlier Adobe Connect version 12.6 Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this...

GitLab Authentication Bypass

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Foxit PDF Reader Use After Free Information Disclosure

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the use of memory after it is freed during the processing of Doc objects. Exploiting this vulnerability can allow ...

Apache Kafka Automatic ConfigProvider Disclosure

The vulnerability of the Automatic ConfigProvider component in the Apache Kafka messaging broker is related to insufficient protection of operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information that should be protected...

Avigilon VideoIQ iCVR HD Path Traversal

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Linux xe_vm_create_ioctl() Data Compromise

The vulnerability of the xevmcreateioctl function in the drivers/gpu/drm/xe/xevm.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

SINEC Traffic Analyzer Access Control

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Microsoft Copilot Studio Information Disclosure

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence is related to information disclosure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

netfilter Heap Buffer Overflow DoS

The vulnerabilities of the functions nfflowoffloadinethook in the net/netfilter/nfflowtableinet.c module and nfflowskbencapprotocol in the net/netfilter/nfflowtableip.c module of the Linux kernel’s netfilter component are related to the use of memory beyond the allocated buffer. Exploitation of...

Adobe Audition Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Zendesk Customer Service Authorization Disclosure

The vulnerability of Zendesk’s customer service and sales software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Dawn Component Data Compromise

The vulnerability of the Dawn component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...