Kubernetes Rancher Access Restriction Privilege Escalation

The vulnerability of Kubernets Rancher cluster management software is related to the lack of restrictions on access to protected information. Exploiting this vulnerability allows a malicious actor to disclose protected data and gain administrative control over the Kubernetes cluster...

Svacer SAST Information Disclosure

The vulnerability of the Svacer SAST static analyzer app is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Fortinet FortiPortal SQL Injection Information Disclosure

The vulnerability of the Fortinet FortiPortal security analysis and management tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

Fortinet FortiPortal Unauthorized Access

The vulnerability of the graphical user interface of the Fortinet FortiPortal security analysis and management tool is related to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to...

GHSA-6J89-FRXC-Q26M @strapi/plugin-content-manager leaks data via relations via the Admin Panel

Summary 1. If a super admin creates a collection where an item in the collection has an association to another collection, a user with the Author Role can see the list of associated items they did not create. They should only see their own items that they created, not all items ever created...

PT-2024-22786 · Strapi · @Strapi/Plugin-Content-Manager +1

Name of the Vulnerable Software and Affected Versions: Strapi versions prior to 4.19.1 Description: The issue concerns Strapi, an open-source content management system. In affected versions, when a super admin creates a collection with an item associated to another collection, a user with the...

Common Service Desktop GE Healthcare Unauthenticated Access Disclosure

The vulnerability of the deleteFiles function in the Common Service Desktop web application of GE HealthCare is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

Intel iwlwifi Wireless Communication Buffer Overflow

The vulnerability of the function iwldbgtlvoverrideTrigNode in the driver drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.c of the Intel iwlwifi wireless adapter driver for the Linux operating system is related to writing beyond the allocated buffer. Exploitation of this vulnerability could allow ...

TIPC Process Access

The vulnerability of the TIPC Process-to-Process Communication Service in the Linux operating system is related to the lack of initialization for data sent by users. Exploiting this vulnerability can allow attackers to gain access to protected data...

Windows Cloud Files Mini Filter Disclosure

The vulnerability of the Windows Cloud Files Mini Filter driver in operating systems is related to data type mixing errors. Exploiting this vulnerability can allow attackers to disclose protected information...

Power BI Client JS SDK Unauthenticated Access

The vulnerability of the tools and libraries used for data processing and report rendering in Power BI client JS SDK is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using specially create...

PowerScale OneFS Cryptographic Defect Unauthorized Access

The vulnerability of the PowerScale OneFS operating system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

PowerScale OneFS Data Compromise

The vulnerability of the PowerScale OneFS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

OpenShift Mirror Registry Unencrypted Storage

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

PDF Viewer Memory Buffer Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

PT-2024-3751

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI Client JavaScript SDK affected versions not specified Description: The issue is related to insufficient input validation in the Power BI client JS SDK, which can be exploited by a remote attacker to gain unauthorized access...

CVE-2024-4536

In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, in the EDC Connector component https://github.com/eclipse-edc/Connector , an attacker might obtain OAuth2 client secrets from the vault. In Eclipse Dataspace Components from version 0.2.1 to 0.6.2, we have identified a security...

Windows Distributed File System Information Disclosure

The vulnerability of the distributed file system DFS in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

Core server component Oracle WebLogic Server Unauthorized Access

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Oracle HTTP Server Unauthorized Access

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...