2345 matches found
system call processing function Data Compromise
The vulnerability of the system call processing function of the software for displaying the characteristics and parameters of hardware devices, such as CPU-Z, is related to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity and confidentialit...
CE Phoenix e-commerce software Auth Bypass
The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
TestWfsPost Component Unauthorized Access
The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
Dell ThinOS Information Disclosure
The vulnerability of the Dell ThinOS operating system for thin clients involves the storage of critical information in an open manner. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the protected information...
Dell Smart Dock Information Disclosure
The vulnerability of the Dell Smart Dock software lies in the ability to disclose information through registration files. Exploiting this vulnerability could allow a perpetrator to…...
ROS-20250827-03
A vulnerability in the resolveFile method of the Apache Commons VFS Virtual File System unified API for accessing different file systems is due to errors in the relative path handling of the directory when processing the relative path of the directory. Virtual File System method is related to...
Adaptive Substance 3D Painter Buffer Overflow
The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Adobe Framemaker Buffer Overflow Unauthorized Access
The vulnerability of the Adobe Framemaker desktop publishing system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by sending a specially created malicious file...
Spring Framework Unauthorized Access
The vulnerability of container services in the Spring Framework is related to incorrect restrictions on path names pointing to restricted directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux kernel Data Compromise
The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Tenda CP3 Telnet Service Unauthorized Access
The vulnerability of the Telnet Service component in the Tenda CP3 microprogrammable camera software is related to the use of weak credentials. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Linux ext4 Directory Directory? Wait, we need to follow rules
The vulnerability in the fs/ext4/dir.c module of the Linux operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...
NTFS Disclosure
The vulnerability of the NTFS file system in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...
Google Chrome File Picker Unauthorized Access
The vulnerability of the File Picker component in the Google Chrome browser is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through a specially...
Business Chat Function Disclosure Protected Information
The vulnerability of the Business Chat function in Microsoft 365 Copilot relates to the lack of measures taken to cleanse data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
Substance 3D Stager Buffer Overflow Unauthorized Access
The vulnerability of the Substance 3D Stager software lies in the issue of writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Netgear DGND3700 Information Disclosure
The vulnerability of Netgear DGND3700 router’s built-in software is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...
iOS iPadOS Information Disclosure
The vulnerability of iOS and iPadOS operating systems is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...
Oracle E-Business Suite Search and Register Users Unauthorized Access
The vulnerability of the “Search and Register Users” sub-component of the Oracle User Management component in the Oracle E-Business Suite system is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
tarfile module CPython Data Compromise
The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...