ROS-20250307-14

Moodle virtual learning environment vulnerability is related to access control weaknesses. Exploitation The vulnerability could allow a remote attacker to gain unauthorized access to the protected information. protected information A vulnerability in the Moodle virtual learning environment is...

The vulnerability of ArcGIS Server arises from improper external management of file names or paths, allowing attackers to gain unauthorized access to protected information.

The vulnerability of ArcGIS Server lies in improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ArcGIS Server server, related to deficiencies in access control, allows attackers to gain unauthorized access to protected information.

The vulnerability of ArcGIS Server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the ArcGIS Server server, related to incorrect restrictions on the path to the restricted catalog, allows attackers to gain unauthorized access to protected information.

The vulnerability of ArcGIS Server is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-12799 Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects...

CVE-2024-12799 Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux, 64 bit allows Privilege Abuse. This vulnerability could allow an authenticated user to obtain higher privileged user’s sensitive information via crafted payload. This issue affects...

The vulnerability of the Intel PROSet/Wireless WiFi connection tool lies in the insufficient channel limitation for specified endpoints, allowing attackers to compromise the protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient channel limitation for specified endpoints. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of the microprogramming-based BIOS software in Dell Edge Gateway 5200 and 3200 allows unauthorized access to protected information by exploiting a flaw in the software.

The vulnerability of the microprogrammed BIOS software in Dell Edge Gateway 5200 and 3200 models relates to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2020-24587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that all fragments of a frame are...

PT-2025-9833 · Opentext · Opentext Identity Manager Advanced Edition

Name of the Vulnerable Software and Affected Versions: OpenText Identity Manager Advanced Edition versions 4.8.0.0 through 4.9.0.0 Description: The issue is related to insufficiently protected credentials, allowing an authenticated user to obtain higher privileged user’s sensitive information via...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to the possibility of exploiting memory after it is freed. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the virtual learning environment Moodle, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to improper management of user actions, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to improper management of user actions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Google Chrome browser’s Extensions API allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Extensions API is related to errors in information representation by the user interface. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a special extension of Chrome...

Linux Distros Unpatched Vulnerability : CVE-2017-13078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the four-way handshake, allowing an attacker within radio range t...

Linux Distros Unpatched Vulnerability : CVE-2017-13080

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the group key handshake, allowing an attacker within radio range ...