Apache Santuario XML Security for Java Information Disclosure

The vulnerability of the Apache Santuario XML Security platform for securing XML standards is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Google Chrome Profiles Unauthorized Access

The vulnerability of the Profiles component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

EisBaer SCADA Password Exposure

The vulnerability of the EisBaer SCADA system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a perpetrator to disclose protected information and compromise the system...

SCADA EisBaer Information Disclosure

The vulnerability of the SCADA system of EisBaer is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

EisBaer SCADA Unauthorized Access

The vulnerability of the EisBaer SCADA system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

EisBaer SCADA Unauthorized Access

The vulnerability of the SCADA system of EisBaer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2023-6644 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to a use after free in Reading Mode, which could allow a remote attacker to potentially exploit heap corruption via specific UI gestures if a user is convinced t...

Jenkins Multibranch Scan Webhook Trigger Plugin Information Disclosure

The vulnerability of the Jenkins Multibranch Scan Webhook Trigger Plugin is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Zoom Video Conferencing Critical Information Unencrypted

The vulnerability of the Zoom video conferencing service is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain access to protected data...

PeopleSoft Enterprise CC Common Application Objects Unauthenticated Access

The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...

CVE-2023-41077

An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The issue was addressed with improved checks...

PT-2023-8348 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: A privacy issue is related to insufficient protection of registration data in the Contacts component of iOS, macOS, and iPadOS operating system...

Connectize G6 AC2100 Disclosure Protected Information

The vulnerability in the web interface of the Connectize G6 AC2100 router software exists due to the failure to address the special elements used in the operating system command. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Oracle MySQL Server Encryption Access Control

The vulnerability of the Oracle MySQL Server component related to security: encryption involves a lack of protection for operational data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to protected information...

PDF Reader Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to...

Titan SFTP MFT NextGen Server Improper Permissions

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in incorrect default permissions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

crosvm Component Data Compromise

The vulnerability of the crosvm component in Google Chrome relates to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Microsoft Dynamics 365 Unauthorized Access

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SUSE-SU-2023:4047-1 Security update for glibc

This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaihinet bsc1215286, BZ 28931 Other changes: - Added GB18030-2022 charmap jscPED-4908, BZ 30243 - Run vismain only if linker supports protected data symbol bsc1215505...

Acronis Agent Authentication Bypass

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...