iOS iPadOS Access Control Unauthorized Access

The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...

CLFS Log System Driver Unauthorized Access

The vulnerability of the CLFS log system driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft SharePoint Server Data Compromise

The vulnerability of Microsoft SharePoint Server packages is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of protected information through a specially crafted HTTP request...

Network File System Windows Unauthorized Access

The vulnerability of the Network File System NFS of Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

D-Link DIR-882 Disclosure Protected Information

The vulnerability of the Syslog component in D-Link DIR-882 wireless routers relates to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

Hitachi Vantara Pentaho Business Analytics Server Path Traversal

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Hitachi Vantara Pentaho Business Analytics Server Unauthorized Access

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Swarm Mode dockerd Data Compromise

The vulnerability of the Swarm Mode mode of the dockerd daemon, a software tool for creating containerized systems like Moby and the Mirantis Container Runtime environment, is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows an attacker to compromise...

Android Screenshot Editor Unauthorized Access

The vulnerability of the built-in screenshot editor in Android operating systems is related to an incorrect file saving procedure after editing and replacing the original file. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected...

FedCM Component Google Chrome Data Compromise

The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

Resource Timing Unauthorized Access

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux NFS Access Privilege Escalation

The vulnerability of the Linux operating system’s Network File System kernel relates to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...

Linux ib_copy_ah_attr_to_user() Unauthenticated Access Disclosure

The vulnerability of the ibcopyahattrtouser function in Linux operating system-based networking managers is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Magento XML Request Processing Unauthorized Access

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Mozilla Firefox Local Path Access

The vulnerability of the Mozilla Firefox browser is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker to convert a URL address into a local path and gain unauthorized access to protected information...

Adobe Experience Manager Weak Encryption Disclosure

The vulnerability of the Adobe Experience Manager content and media data management system is related to the use of a weak encryption mechanism. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

Fortinet FortiSOAR Unauthorized Access

The vulnerability of the administration interface of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker,...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

Adobe Dimension Buffer Overflow Info Disclosure

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

PCL6 Printer Driver Unauthorized Access

The vulnerability of the PCL6 printer driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...