2345 matches found
macOS Storage Unauthorized Access
The vulnerability of macOS storage operations is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...
SAP Plug-In Basis Plugin Auth Bypass
The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
D-Link DIR-816 Data Compromise
The vulnerability in the /goform/form2lansetup.cgi microprogramming system of D-Link DIR-816 relates to the issue of data being written outside the buffer in memory during the processing of the IP parameter. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...
IBM Aspera Faspex Disclosure Unauthorized Action
The vulnerability of the IBM Aspera Faspex file-sharing application is related to changes in the assumed immutable data. Exploiting this vulnerability could allow a malicious actor to disclose protected information and perform unauthorized actions on behalf of another user...
Apache Superset SQL Injection
The vulnerability of the Apache Superset data visualization software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...
Nuvoton NCT6775F Driver Heap Buffer Overflow
The vulnerability of the DIVROUNDCLOSEST function in the Nuvoton NCT6775F circuit driver drivers/hwmon/nct6775-core.c in the Linux operating system is related to the occurrence of operations outside the memory buffer. Exploiting this vulnerability could allow an attacker to compromise the...
Qualcomm Execution Outside Buffer Disclosure
The vulnerability of embedded Qualcomm software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information during the processing of RTP packets...
Apache InLong Deserialization Unauthorized Access
The vulnerability of the Apache InLong data integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM Guardium Data Protection Information Disclosure
The vulnerability of the IBM Guardium Data Protection platform relates to the leakage of information in error messages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...
BFCache Unauthorized Access
The vulnerability of the BFCache technology used by Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
GrantAccessToMultipleFiles Sandbox Bypass
The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...
FtpFileObject Class Unauthorized Access
The vulnerability of the FtpFileObject class, a common API for accessing various file systems via Apache Commons VFS, is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Device Admin App Unauthorized Access
The vulnerability of the Device Admin App on the ctrlX OS platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP requests...
MongoDB Access Control Unauthorized Access
The vulnerability of the MongoDB database management system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Siemens Scalance LPE9403 Privilege Escalation
The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected...
Ffmpeg Buffer Overflow Info Disclosure
The vulnerability of the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
TYPO3 Front End User Registration Unauthenticated Access
The vulnerability of the Front End User Registration srfeuserregister extension of the TYPO3 content management system is related to the use of a insecure direct link to an object IDOR. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
TYPO3 femanager Unauthorized Access
The vulnerability of the femanager extension of the TYPO3 content management system is related to the use of insecure direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
TYPO3 ns_backup Unauthorized Access
The vulnerability of the Backup Plus nsbackup extension of the TYPO3 content management system is related to errors in the access control for saved backup files and configurations. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
