2345 matches found
Net-SNMP Privilege Escalation
The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...
Linux KVM Information Disclosure
The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...
X-server fly-dm Authentication Bypass
The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...
Cisco Data Center Network Manager Web Interface Access Disclosure
The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...
Microsoft Edge Android Insufficient Validation
The vulnerability of Microsoft Edge browser for Android is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...
Cisco Data Center Network Manager Web Interface Access Disclosure
The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...
Cisco Data Center Network Manager Web Interface Access Disclosure
The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...
SAML2 Authentication Library Signature Verification Bypass
The vulnerability of the authentication library for exchanging identification data according to the SAML2 standard, implemented with PySAML2, is related to incorrect verification of the cryptographic signature of the data. Exploiting this vulnerability could allow a malicious actor to bypass the...
Keepalived Print Data Buffer Overflow
The vulnerability of the PrintData or PrintStats implementation in the network traffic balancing system of Keepalived lies in the lack of protection for service data when the MODE=“0666” mode is used. Exploiting this vulnerability can allow an attacker to gain access to the protected information...
Cisco Vision Dynamic Signage Director Access Information Disclosure
The vulnerability of the Cisco Vision Dynamic Signage Director digital content management web interface is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain access to protected information...
Cisco IOS Command Syntax Analyzer Access Disclosure
The vulnerability of the command syntax analyzer in Cisco IOS and Cisco IOS XE operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...
Envoy Insufficient Verification Information Disclosure
The vulnerability of the network software tool Envoy is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
Node.js HTTP Header Error
The vulnerability of the Node.js software platform is related to an error in handling HTTP header names. Exploiting this vulnerability can allow a remote attacker to gain access to protected information or enhance their privileges...
Adobe Reader Path Traversal
The vulnerability of the Adobe Reader text viewer is related to errors that occur when restricting access to the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to gain access to protected information in the context of the current user...
Cisco HyperFlex Installation Information Disclosure
The vulnerability of the Cisco HyperFlex hyper-converged infrastructure deployment component is related to data encryption errors. Exploiting this vulnerability may allow an attacker to gain access to protected information...
PT-2020-5216 · Microsoft · Sharepoint Foundation +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Description: The issue is related to errors in...
PT-2020-5293 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Kerberos protocol in the Windows operating system, which is associated with a violation of the data protection...
Blink Web Page Display Unauthorized Access
The vulnerability of Blink’s web page display mechanism in the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PDFium PDF Content Processor Unauthorized Access
The vulnerability of the PDFium web browser’s PDF-content processing component in Google Chrome relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...
Cisco Expressway Relay NAT Unauthorized Access
The vulnerability of the data protection mechanisms of the Cisco Expressway server’s Traversal Using Relay NAT TURN software relates to access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...