The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

PT-2024-5255 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control, allowing a remote attacker to disclose protected information. Recommendations: At the moment, there is no...

The vulnerability of the File Protocol Handler component in Cisco Webex Teams software allows attackers to disclose protected information.

The vulnerability of the File Protocol Handler component in Cisco Webex Meetings and Teams software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted link...

The vulnerability of the Logger Module in the Dell Software Repository Manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Logger Module in the Dell Repository Manager exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

The vulnerability of the microprogramming software for RUGGEDCOM ROS, related to the disclosure of system data by unauthorized parties in the controlled area, allows a intruder to disclose protected information.

The vulnerability of the microprogramming software of RUGGEDCOM ROS relates to the disclosure of system data within the controlled area. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the SQL engine of the Dell Data Analytics Engine (DDAE) in the Dell Data Lakehouse data storage platform allows a hacker to disclose protected information.

The vulnerability of the SQL engine of the Dell Data Analytics Engine DDAE in the Dell Data Lakehouse data storage platform is related to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability affects the file function /tmp/out of the Tesseract component of the software suite for processing, transforming, and generating Ghostscript documents. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through...

The vulnerability of the Ethernet Frame Handler component in the microprogramming software for RUGGEDCOM Ethernet switches allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Ethernet Frame Handler component in the microprogrammed software of RUGGEDCOM Ethernet switches is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerabilities of the event monitoring, threat detection, and security analytics platforms of the IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, stem from the storage of protected information in unencrypted form. This allows attackers to exploit these vulnerabilities to disclose protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, security analytics, and IBM QRadar Suite, as well as IBM Cloud Pak for Security, are related to the storage of protected information in unencrypted form. Exploiting these vulnerabilities can allow attackers to gain...

The vulnerability of the IBM Sterling Partner Engagement Manager software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Sterling Partner Engagement Manager software is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Client Registration Handler component of the Keycloak identity and access management software allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Client Registration Handler component of the identity and access management software for Keycloak is tightly encrypted to filter out unauthorized requests for permission. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability of the Team Chat component in Zoom’s video conferencing software allows attackers to disclose protected information.

The vulnerability of the Team Chat component in Zoom’s video conferencing software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker who operates remotely to disclose sensitive information...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves defects in the error reporting mechanism, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the TLS/SSL software component used for managing SAN networks in Brocade SANnav systems allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the TLS/SSL software components used for managing SAN networks in Brodage SANnav systems is related to insufficient encryption reliability. Exploiting this vulnerability could allow a remote attacker to carry out a “man-in-the-middle” attack and gain unauthorized access to...

The vulnerability of the OpenAPI audit tool for detecting and tracking network activities, Nozomi Guardian, and the Nozomi Central Management Console (CMC), a centralized security management tool, allows attackers to gain access to protected information.

The vulnerability of the OpenAPI-based detection and monitoring tool for network activities, Nozomi Guardian, as well as the Nozomi Central Management Console CMC, relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access t...

The vulnerability in the web-based client of IBM Datacap Navigator software for document collection and processing involves security flaws in the source code of IBM Datacap, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Datacap Navigator web client software for document collection and processing involves deficiencies in the security protection of operational data in the source code. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access t...

The vulnerability of the Security component of the Oracle Retail Xstore Office software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Retail Xstore Office software relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Finance LOV component of the Oracle Trade Management application, a business automation system of Oracle E-Business Suite, allows a perpetrator to disclose protected information.

The vulnerability of the Finance LOV component in the Oracle Trade Management application of the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to exploit it to disclose protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development kit SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...