Mozilla Firefox Thunderbird Data Compromise

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to improper storage of permissions. Exploiting these vulnerabilities can allow remote attackers to influence the confidentiality of protected information...

SIMATIC Reader Information Disclosure

The vulnerability of SIMATIC Reader software’s configuration files is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures and disclose protected information when a faulty certificate is loaded...

Android bootloader Data Compromise

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality and accessibility of the protected...

HP DesignJet SMTP Server Credential Handler Unauthorized Access

The vulnerability of the SMTP Server Credential Handler component in HP DesignJet printers is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Trend Micro Antivirus One Access Control

The vulnerability of the Trend Micro Antivirus One antivirus protection software for MacOS systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

RAPL Interface Disclosure

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...

Linux kernel Memory Management Buffer Overflow DoS

The vulnerability of the filemapfaultrecheckptenone function in the mm/filemap.c module of the Linux kernel’s memory management subsystem is related to the repeated use of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could allow an...

Splunk Enterprise Unauthorized Access

The vulnerability of the splunkd component of the Splunk Enterprise platform for operational analytics is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

SAP BusinessObjects Business Intelligence Web Intelligence Unauthorized Access

The vulnerability of SAP BusinessObjects Business Intelligence’s Web Intelligence component relates to the unlimited download of dangerous files. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

MySQL Server Telemetry Unauthorized Access

The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...

GitLab Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in representing certain functions. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel Fuse Notify Store Disclosure

The vulnerability of the fusenotifystore function in the fuse file system module of the Linux kernel’s device drivers is related to memory allocation beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protecte...

WebAuthn Compromise

The vulnerability of the Application Programming Interface WebAuthn of Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Online Store Access Control Bypass

The vulnerability of software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to lack of access control. Exploiting this vulnerability can allow a malicious actor to bypass security measures and gain unauthorized access to protected informatio...

Kerberos Protocol Unauthorized Access

The vulnerability of the Kerberos protocol for Windows operating systems lies in the absence of the necessary encryption step. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Ivanti Avalanche Faces Mojarra Disclosure

The vulnerability of the Faces Mojarra component in the Ivanti Avalanche mobile device management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Avanpost IDM Access Right Bypass

The vulnerability of the application programming interface of the Avanpost IDM system relates to insufficient verification of access rights to objects within the application. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Autofill Function Data Compromise

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GitLab Access Control Unauthorized Information Disclosure

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Foxit PDF Reader Annotation Processor Disclosure

The vulnerability of the annotation processor for viewing electronic documents in PDF format, provided by Foxit PDF Reader formerly Foxit Reader, is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information using a...