Linux kernel BPF verifier Unauthorized Access

The vulnerability in the kernel/bpf/verifier.c file of the Linux operating system is related to the disclosure of information due to discrepancies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Titan M Security Module Unauthorized Access

The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Citrix XenMobile Server SQL Injection

The vulnerability of the Citrix XenMobile Server, a system for managing corporate mobile devices, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informatio...

Google Chrome Unauthorized Access

The vulnerability of the Google Chrome browser user interface is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Siemens SICAM Integrated Web Server Remote Unauthorized Access

The vulnerability of the configuration of the integrated web-server microprogramming software for Siemens SICAM remote terminals is related to insufficient data protection. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected information...

Firefox iOS WebKit Unauthorized Access

The vulnerability in the Firefox web browser’s window.webkit implementation for the iOS operating system relates to the disclosure of the SECURITYTOKEN token. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

Netlify Domain Controller DNS Misconfiguration

The vulnerability of the Netlify domain controller implementation is related to improperly configured DNS records. Exploiting this vulnerability allows a malicious actor to intercept cookie files, bypass security mechanisms like CSP, Cross-Origin Resource Sharing CORS, and gain unauthorized acces...

Contiki OS ISN Generator Unauthorized Access

The vulnerability of the ISN generator implementation used in the Contiki OS and uIP is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

autoar-extractor Heap Buffer Overflow Info Disclosure

The vulnerability in the function of the autoar-extractor.c library in the gnome-autoar library is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow an attacker to disclose protected information...

uC/OS uC/TCP-IP Unauthorized Access

The vulnerability of the ISN generator implementation in the uC/OS and uC/TCP-IP protocols is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Go Incorrect Calculation Disclosure Data Compromise

The vulnerability in the crypto/elliptic/p224.go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to disclose protected information and compromise the integrity of that information...

Google Chrome Tab Groups Data Compromise

The vulnerability of Google Chrome’s Tab Groups component is related to writing beyond the buffer limit. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Magento Commerce Order Formatting Unauthorized Access

The vulnerability of the order processing module of the Magento Commerce software platform for developing and managing online stores is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

Magento Commerce API Unauthorized Access

The vulnerability of the user API module of the Magento Commerce software development and management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Oracle Access Manager Web Server Plugin Privilege Escalation

The vulnerability of the Web Server Plugin component of the Oracle Access Manager software component of the Oracle Fusion Middleware platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to create, delete, or modify access rights...

Intel Ethernet E810 series network adapter drivers Unauthorized Access

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Django FILE_UPLOAD_DIRECTORY_PERMISSIONS Disclosure

The vulnerability of the Django web application development framework’s FILEUPLOADDIRECTORYPERMISSIONS implementation is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows Mobile Device Management Unauthorized Access

The vulnerability of Windows Mobile Device Management for Windows operating systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...