CVE-2024-34610: Undefined Security Weakness

Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data...

ROS-20240807-05

A vulnerability in the PostPolicyBucket component of the MinIO object storage server is related to errors in privilege management. privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by sending specially crafted HTTP...

Linux cachefiles_ondemand_daemon_read() Buffer Overflow

The vulnerability of the cachefilesondemanddaemonread function in the fs/cachefiles/ondemand.c file of the Linux kernel’s cachefile file system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability could all...

Linux RPC Kernel Heap Buffer Overflow DoS

The vulnerability of the svctcplistendataready function in the net/sunrpc/svcsock.c module, which is part of the Linux operating system’s RPC Remote Procedure Call protocol, relates to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

IBM QRadar Suite Security Analytics Information Disclosure

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to the storage of protected information in unencrypted form. Exploiting these vulnerabilities can allow attackers to gain...

IBM Datacap Navigator Unencrypted Storage

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data...

Acronis Agent Unauthorized Access

The vulnerability of Acronis Agent, a software solution for data protection, within Acronis Cyber Protect 15, is related to insufficient protection of operational data due to improper privilege assignment. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthoriz...

WorkBench64 Module Disclosure Protected Information

The vulnerability of the WorkBench64 module in the GENESIS64 SCADA system is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Experimental Permission Model Node.js Unauthorized Access

The vulnerability of the Experimental Permission Model component in the Node.js software platform is related to errors in permission handling when the --allow-fs-read flag is used. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

SCADA MasterSCADA 4D Information Disclosure

The vulnerability of the SCADA system MasterSCADA 4D is related to the transmission of information in an open manner. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

Fanuc Series 32i CNC Resource Management Unauthorized Access

The vulnerability of Fanuc Series 32i CNC controller’s microprogramming software is related to resource management errors. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

IBM InfoSphere Information Server Information Disclosure

The vulnerability of the IBM InfoSphere Information Server software platform is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

MarketplaceKit Disclosure

The vulnerability of the MarketplaceKit component for iPadOS and iOS lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

GitLab Improper Authentication Unauthorized Access

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Jenkins Bitbucket Branch Source Plugin Information Disclosure

The vulnerability of the Jenkins Bitbucket Branch Source Plugin is related to the disclosure of information through registration files. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2024-7488 · Yougile · Yougile

Name of the Vulnerable Software and Affected Versions: YouGile affected versions not specified Description: The issue is related to insufficient protection of service data in the project management service. It may allow a remote attacker to disclose protected information. Recommendations: At the...

PowerPanel Enterprise MCUDBHelper Disclosure

The vulnerability of the querycontractresult function in the MCUDBHelper component of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow...

Sonatype Nexus Repository Manager Path Traversal

The vulnerability of Sonatype Nexus Repository Manager is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Audio component Microsoft Edge Google Chrome Disclosure

The vulnerability of the Audio component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to expose sensitive information through specially created PDF files...