The vulnerability of the Apache InLong data integration platform, related to the recovery of unreliable data in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache InLong data integration platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending specially created data...

The vulnerability of the IBM FileNet Content Manager service for organizing, storing, and managing documents arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM FileNet Content Manager service for document organization, storage, and management is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

The vulnerability of the Assets Discovery agent (formerly Insight Discovery), a data processing product of Atlassian Jira Service Management Data Center and Server, as well as Cloud, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Assets Discovery agent previously known as Insight Discovery of Atlassian’s Jira Service Management Data Center and Server products and Cloud solutions is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to the disclosure of information during data transmission, allows attackers to gain unauthorized access to protected information.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after the memory is freed, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to disclose...

The vulnerability of the `core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java` component of the Dataease database management system, which allows a hacker to disclose protected information.

The vulnerability of the core/core-backend/src/main/java/io/dataease/datasource/type/Mysql.java component of the Dataease database management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to disclose sensitive information...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the storage of passwords in a recoverable format, which allows an attacker to disclose the protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the storage of passwords in a recoverable format. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the web interface of the IBM Engineering Requirements Management DOORS software allows a hacker to disclose protected information.

The vulnerability of the IBM Engineering Requirements Management DOORS application’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

PT-2024-2252 · Microsoft · Windows Compressed Folder +1

Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to insufficient input validation in the Windows Compressed Folder component, which can be exploited by creating a specially crafted file. This allows ...

The vulnerability of the microprogramming software of Schneider Electric Easergy T200 remote control devices allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in Schneider Electric Easergy T200 remote control devices lies in the use of files and directories accessible to external parties. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the IBM MQ Operator, a software tool for managing containerized environments, and the IBM MQ messaging system lies in the fact that critical information is transmitted in plaintext. This allows attackers to disclose protected information.

The vulnerability of the IBM MQ Operator, a software tool for managing containerized environments, and the IBM MQ messaging management system is related to the transmission of critical information in open text format. Exploiting this vulnerability can allow attackers to disclose protected...

The vulnerability of the sock_orphan() function in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sockorphan function in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the `efivarfs_reconfigure()` function in the `fs/efivarfs/super.c` file of the EFI File System kernel of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the efivarfsreconfigure function in the fs/efivarfs/super.c file of the EFI Variable Filesystem kernel of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the integrity and...

The vulnerability of the drm_sched_entity_init() function in the drivers/gpu/drm/scheduler/sched_entity.c file of the Linux operating system’s DRAM driver allows a hacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the drmschedentityinit function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system’s DRM driver is related to insufficient control over buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...

The vulnerability of the v4l2_async_unregister_subdev() function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the v4l2asyncunregistersubdev function in the drivers/media/v4l2-core/v4l2-async.c file of the Linux kernel’s video subsystem driver is related to the reallocation of memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

The vulnerability of the rtw_get_tx_power_params() function of the UBSAN service (Undefined Behaviour Sanity Checker) in the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the rtwgettxpowerparams function of the UBSAN service Undefined Behaviour Sanity Checker in Linux kernel is related to the occurrence of operations outside the buffer in memory due to inconsistencies in the channel group values. Exploitation of this vulnerability can allow an...

The vulnerability of the Mozilla Firefox browser’s fetch function is related to resource management errors, allowing attackers to compromise the integrity of protected information.

The vulnerability of the Mozilla Firefox browser’s fetch function is related to resource management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge allows attackers to disclose protected information.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created...

The vulnerability of the site isolation function in Microsoft Edge and Google Chrome browsers allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...