Rapid SCADA Error Reporting Unauthorized Access

The vulnerability of the SCADA system Rapid SCADA is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

FeverWarn API Unauthenticated Access

The vulnerability of the API interfaces of microprogramming software for thermal scanning systems like FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi involves the absence of authentication procedures for critical functions. Exploiting this vulnerability could allow ...

Emerson Rosemount X-STREAM Disclosure

The vulnerability of Microprogrammed Software in Emerson Rosemount X-STREAM flow analyzers is related to insufficient encryption reliability. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Oracle ZFS Storage Appliance Object Store Unauthorized Access

The vulnerability of the Core component of the Oracle ZFS Storage Appliance Kit relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

IBM DB2 Cryptographic Algorithm Unauthorized Access

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

Photos storage Disclosure

The vulnerability of Photos storage in operating systems such as macOS, iOS, and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

Tianocore edk2 Heap Buffer Overflow DoS

The vulnerability of the Ip6IsOptionValid function in the Tianocore edk2 library is related to the execution of a loop with an unreachable exit condition when processing the PadN parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of protected...

Docker IBM Security Verify Access Protection Disclosure

The vulnerability of the IBM Security Verify Access application for Docker environments stems from the lack of encryption measures for protected data. Exploiting this vulnerability can allow attackers to disclose protected information...

macOS Terminal Emulator Disclosure

The vulnerability of the macOS terminal emulator is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to execute arbitrary control commands...

Corporate Access Management Encryption Disclosure

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

NSSpellChecker Unauthenticated Access

The vulnerability of the NSSpellChecker spelling checker interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Tianocore edk2 Heap Buffer Overflow Info Disclosure

The vulnerability of the Dhcp6HandleAdvertiseMsg function in the Tianocore edk2 library is related to access control deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Centralized Third-party Jars OkHttp Disclosure

The vulnerability of the Centralized Third-party Jars component OkHttp in the Oracle Access Manager access control tool is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Paragon Active Assurance Report Handler Unauthorized Access

The vulnerability of the Report Handler component of the testing and monitoring platform for physical, hybrid, and virtual networks, Paragon Active Assurance previously known as Netrounds, is related to insufficient access control. Exploiting this vulnerability would allow a malicious actor,...

Windows LSASS Disclosure

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

BMC Unauthorized Access

The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the lack of measures taken to neutralize specific elements in the LDAP request. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

D-Link G416 Unauthorized Access

The vulnerability of the HTTP-based microprogramming software for D-Link G416 routers lies in the insufficient handling of exceptional states. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using specially created data...

Message Queuing Client Unauthorized Access

The vulnerability of the Message Queuing Client MSMQC on Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-38612

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...

Red Hat Developer Hub Catalog-Import Disclosure

The vulnerability of the catalog-import function on the online software development platform Red Hat Developer Hub is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...