Redmine.pm Access Information Disclosure

The vulnerability of the Redmine.pm web application for managing projects and tasks in Redmine is related to the lack of verification of the “Repository” module in project settings. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain access to protected...

PlayReady DRM Android CVE

The vulnerability of PlayReady DRM on the Android operating system, identified from the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

PlayReady DRM Android Component Data Compromise

The vulnerability of PlayReady DRM on the Android operating system, found in the CAF repository, is related to the lack of checks for buffer size. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

Android CAF-release TrustZone Data Compromise

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

WCDMA Android Access Information Disclosure

The vulnerability of the WCDMA component of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

Secure File System SFS Access Disclosure

The vulnerability of the secure file system SFS in the Android operating system arises due to numerical overflow or cyclic shift. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information, manage resources, or execute programs...

Android Core Kernel Information Disclosure

The vulnerability in the Core Kernel of the Android operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

iOS Data Compromise

The vulnerability of the iTunes Store web service’s iTunes sandbox component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information ...

iOS Information Disclosure

The vulnerability of the iOS operating system’s accessibility component is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, acting locally, to access protected information about photos and contacts by leveraging the additional accessibility...

iOS Data Compromise

The vulnerability of the Local Authentication component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating locally, to compromise the confidentiality, integrity, and accessibility of protected information by...

iOS Information Disclosure

The vulnerability of the Contacts component in the iOS operating system is related to deficiencies in access control for the Address Book application. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to protected information...

Google Chrome Access Information Disclosure

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a specially created PDF file...

Google Chrome Access Information Disclosure

The vulnerability of the V8 component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created HTML page...

Google Chrome Access Information Disclosure

The vulnerability of the V8 component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created HTML page...

Windows Privilege Escalation

The vulnerability of the GDI driver in the Windows operating system’s kernel mode is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information through a specially created application...

Android Access Information Disclosure

The vulnerability in the media/libmediaplayerservice/MetadataRetrieverClient.cpp file of the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information throu...

Fonality’s corporate telephony software Access Disclosure

The vulnerability of the Fonality corporate telephony software relates to the rigid encoding of registration data for FTP login records. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information via FTP or SSH connections...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the Debian GNU/Linux operating system’s kernel-headers-2.6.8-3-64 package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the kernel-image-2.6.8-2-64-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the kernel-image-2.6.8-3-32-smp operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...