Warrior Framework Plugin Password Exposure

The vulnerability of the Jenkins automation server’s Warrior Framework plugin lies in the storage of passwords in an exposed manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

Tekon SCADA Unauthorized Access

The vulnerability of the “Tekon” SCADA system, related to access control errors. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected information...

Windows User-Mode Driver Framework Disclosure

The vulnerability of the Windows User-Mode Driver Framework UMDF in Microsoft Windows is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Adobe Substance 3D Stager Buffer Overflow Info Disclosure

The vulnerability of Adobe Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Statistics Gatherer Plugin Unencrypted Secret Storage

The vulnerability of the Statistics Gatherer plugin in the Jenkins automation server relates to the storage of the AWS secret key in an unencrypted form within the configuration file org.jenkins.plugins.statistics.gatherer.StatisticsConfiguration.xml. Exploiting this vulnerability could allow a...

Jenkins automation server plugin VAddy Key Disclosure

The vulnerability of the Jenkins automation server plugin VAddy lies in the storage of keys in an open manner within the config.xml file. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

Accent Platform SQL Injection Unauthorized Access

The vulnerability of the “Accent” platform lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Cisco Customer Collaboration Platform Disclosure

The vulnerability of the web interface of the software for monitoring social networks on the Cisco Customer Collaboration Platform formerly Cisco SocialMiner is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Windows Imaging Component Disclosure

The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries in memory during file processing for U3D files. Exploiting this vulnerability can allow attackers to disclose protecte...

PDF Document Buffer Overflow Information Disclosure

The vulnerability of PDF document viewing and editing programs such as PDF-XChange Editor, PDF-Tools, and PDF-XChange PRO lies in the reading of data beyond the buffer boundaries during file processing for PRC formats. Exploiting this vulnerability can allow attackers to disclose protected...

Efficient Unlearning with Privacy Guarantees

Privacy protection laws, such as the GDPR, grant individuals the right to request the forgetting of their personal data not only from databases but also from machine learning ML models trained on them. Machine unlearning has emerged as a practical means to facilitate model forgetting of data...

Oracle BI Publisher XML Services Unauthorized Access

The vulnerability of the XML Services component of the Oracle BI Publisher software for creating reports is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of Google Chrome and Microsoft Edge browsers is related to the use of unreliable input data during security decision-making. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by downloadin...

FreeScout support service management system Authorization Bypass

The vulnerability of the FreeScout support service management system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Documino Automation Platform Unauthorized Access

The vulnerability of the Documino automation platform for electronic document processing involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

IBM Storage Protect Server Unauthorized Access

The vulnerability of the IBM Storage Protect formerly IBM Spectrum Protect software platform’s server lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...

Adobe InDesign Buffer Overflow Privilege Escalation

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

Citrix ADC Buffer Overflow DoS

The vulnerability of the Citrix ADC application delivery controller formerly Citrix NetScaler Application Delivery Controller and the Citrix Gateway virtual environment access control system formerly Citrix NetScaler Gateway is related to an operation that goes beyond the buffer in memory...