Windows NFS Portmapper Disclosure

The vulnerability of the Windows NFS Portmapper component in operating systems involves a lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

Hotspot Oracle GraalVM Enterprise Disclosure

The vulnerability of the Hotspot component of Oracle’s software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information...

Oracle Financial Services Behavior Detection Platform Application Unauthorized Access

The vulnerability of the sub-component “Application” within the Oracle Financial Services Behavior Detection Platform of a bank analytics system’s simulation model involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

PeopleSoft Enterprise PeopleTools Web Server Unauthorized Access

The vulnerability of the Web Server component of the Oracle PeopleSoft Enterprise PeopleTools business application exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Security component Disclosure Information

The vulnerability of the Security component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through HTTP requests...

GitLab Merge Request Approvals Unauthorized Access

The vulnerability of the Merge request approvals function in a Git-based software platform for collaborative code development on GitLab is related to the provision of direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

CVE-2023-29103

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1, SIMATIC Cloud Connect 7 CC716 All versions V2.1. The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected dat...

CVE-2023-29103

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1, SIMATIC Cloud Connect 7 CC716 All versions V2.1. The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected dat...

CVE-2023-29103: Use of Hard-coded Password

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1, SIMATIC Cloud Connect 7 CC716 All versions V2.1. The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected dat...

CVE-2023-21493

Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data...

Improper access control

Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21493

Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21493

Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21493

CVE-2023-21493 affects SemShareFileProvider prior to SMR May-2023 Release 1. The vulnerability is an improper access-control issue that enables local attackers to access protected data. Root cause is insufficient access restrictions on SemShareFileProvider components. Affected software is SemShar...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR May-2023 Release 1 version, which originated when SemShareFileProvider allowe...

Oracle BI Publisher Web Server Disclosure

The vulnerability of the Web Server component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information through HTTP requests...

PeopleSoft Enterprise HCM Human Resources Administer Workforce Unauthorized Access

The vulnerability of the Administer Workforce component of the PeopleSoft Enterprise HCM Human Resources platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SpiceDB Error Reporting Unauthorized Access

The vulnerability of the SpiceDB database is related to deficiencies in the mechanism for generating error reports when processing the /debug/pprof/cmdline command with the --grpc-preshared-key parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

PT-2023-7462

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion affected versions not specified Description The issue is related to an out-of-bounds read that exists in the functionality for sharing host Bluetooth devices with the virtual machine. This could allow an attacker ...

Omron CS/CJ Automation Controllers Auth Bypass Info Disclosure

The vulnerability of Omron CS/CJ automation controllers lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...