5646 matches found
The vulnerability of the XProtect virus detection system for macOS operating systems allows a intruder to gain unauthorized access to protected information.
The vulnerability of the XProtect virus detection system for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of Intel microprogramming software, related to insufficient protection of system data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Intel microprogramming software is related to insufficient protection of system data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of Apple Maps’ mapping service in macOS operating systems allows a intruder to gain unauthorized access to protected information.
The vulnerability of Apple Maps’ mapping service in macOS operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the CORS mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CORS mechanism in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of verification of the reliability of data sources or messages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Grade Report Handler component in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Grade Report Handler component in the virtual training environment is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Nomad application orchestrators, related to the lack of authorization, allows attackers to gain unauthorized access to protected information.
The vulnerability of Nomad application orchestrators is related to the lack of authentication. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Device Admin App operating system ctrlX OS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Device Admin App on the ctrlX OS platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sending specially crafted HTTP requests...
The vulnerability of VideoGrace video conferencing software, related to the disclosure of information, allows a intruder to gain unauthorized access to protected information.
The vulnerability of VideoGrace video conferencing software is related to the disclosure of information in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of VideoGrace video conferencing software, related to improper access control, allows a intruder to compromise the accessibility of protected information.
The vulnerability of VideoGrace video conferencing software is related to improper access control. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...
The vulnerability of Nomad application orchestrators, related to the lack of authorization, allows attackers to gain unauthorized access to protected information.
The vulnerability of Nomad application orchestrators is related to the lack of authentication. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of Nomad application developers, related to errors in processing hypertext links, allows attackers to compromise the integrity of the protected information.
The vulnerability of Nomad application developers is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
The vulnerability of the SimpleOne ITSM automation system allows a perpetrator to carry out an SSRF attack and gain unauthorized access to protected information.
The vulnerability of the SimpleOne ITSM automation system is related to insufficient verification of incoming requests. Exploiting this vulnerability could allow a malicious actor to carry out an SRF attack and gain unauthorized access to protected information...
The vulnerability of the reNgine software tool for automated web application reconnaissance, related to insufficient protection of operational data, allows a perpetrator to disclose protected information.
The vulnerability of the reNgine software tool for automated web application reconnaissance is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the vbi_strndup_iconv_ucs2() function in the VBI capture and decoding library libzvbi allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the vbistrndupiconvucs2 function in the VBI capture and decoding library libzvbi is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Database Abstraction Layer (DBAL) of the TYPO3 content management system allows attackers to disclose protected information.
The vulnerability of the Database Abstraction Layer DBAL of the TYPO3 content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
The vulnerability of Firefox browser for iOS exists due to the improper functioning of the ms-cxh and ms-cxh-ful handlers, allowing attackers to compromise the integrity of protected information.
The vulnerability of Firefox browsers for iOS exists due to the improper functioning of the ms-cxh and ms-cxh-ful handlers. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...
The vulnerability of the DataHandler class in the TYPO3 content management system allows attackers to enhance their privileges and gain unauthorized access to protected information.
The vulnerability of the DataHandler class in the TYPO3 content management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...
CVE-2022-30758
Implicit Intent hijacking vulnerability in Finder prior to SMR Jul-2022 Release 1 allow allows attackers to access some protected information with privilege of Finder...
The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager lies in the lack of mechanisms for encoding or shielding output data. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of authentication mechanisms. This allows attackers to compromise the integrity of the protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the absence of authentication. Exploiting this vulnerability allows a malicious actor to remotely influence the integrity of the protected information...