The vulnerability of function 0x22200c() in the system file pffilter.sys of the file and folder protection software IOBit Protected Folder, which allows a malicious actor to cause service failure.

The vulnerability of function 0x22200c in the system file pffilter.sys of the file and folder protection software IOBit Protected Folder is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2017-13077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Pairwise Transient Key PTK Temporal Key TK during the four-way handshake, allowing an attacker...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Temporary File Download (CVE-2024-41771) and Archive File Download (CVE-2024-41770)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Temporary File Download CVE-2024-41771 and Archive File Download CVE-2024-41770. Vulnerability Details CVEID:CVE-2024-41770 DESCRIPTION: IBM Engineering Requirements Management DOORS Next could allow a remote attacker to...

The vulnerability in the form2AddVrtsrv.cgi script of the Virtual Service Handler component of the D-Link DIR-816 A2 router microprogramming system, which allows a attacker to compromise the integrity of protected information.

The vulnerability of the form2AddVrtsrv.cgi script of the Virtual Service Handler component in the D-Link DIR-816 A2 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected...

The vulnerability of the M-Files Server platform, which is related to the use of files and directories accessible to external parties, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the M-Files Server platform for document automation involves the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the IBM InfoSphere Information Server software platform, related to the exposure of system data to a controlled area, allows an intruder to disclose protected information.

The vulnerability of the IBM InfoSphere Information Server software platform is related to the exposure of system data to an controlled area. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

CVE-2024-13832

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'utelementor' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with...

The vulnerability of the libavutil library, a multimedia library used in FFmpeg, allows attackers to disclose protected information.

The vulnerability of the libavutil library, a multimedia library used in FFmpeg, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the libavutil library, a multimedia library used in FFmpeg, allows attackers to disclose protected information.

The vulnerability of the libavutil library, a multimedia library within FFmpeg, relates to the lack of memory release after the effective lifespan of the library has ended. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Insufficiently Protected Credentials

leantime/leantime is vulnerable to Insufficiently Protected Credentials. The vulnerability is due to improper cache control where an attacker can view sensitive information even if they are not logged into the account anymore...

CVE-2024-2321

An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed directly using a refresh token instead of the expected access token. Due to improper authorization checks and token mapping, session cookies are not required for API access, potential...

The vulnerability of the geolocation service in Windows operating systems allows attackers to disclose sensitive information that is protected by this service.

The vulnerability of the geolocation service in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

VulnCheck KEV: CVE-2024-44000

Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through 6.5.0.1...

PT-2025-8912 · Wso2 · Wso2

Name of the Vulnerable Software and Affected Versions: WSO2 products affected versions not specified Description: An issue exists where protected APIs can be accessed directly using a refresh token instead of the expected access token, due to improper authorization checks and token mapping. This...

WSO2 API Manager和WSO2 Identity Server 安全漏洞

WSO2 API Manager and WSO2 Identity Server IS are both products of WSO2, Inc.WSO2 API Manager is an API lifecycle management solution.WSO2 Identity Server is an identity server. A security vulnerability exists in WSO2 API Manager and WSO2 Identity Server that stems from improper authorization...

The vulnerability of the software products of the LLC “NPO ‘MIR’, related to the unencrypted storage of account data, allows a perpetrator to disclose protected information.

The vulnerability of the software products developed by LLC “NPO ‘MIR’ lies in the unencrypted storage of account data. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PAN-OS operating system, related to the unencrypted storage of credentials, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PAN-OS operating system is related to the unencrypted storage of credentials. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20250226-12

Vulnerabilities in the Hotspot components of the Oracle Java SE software platform, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines are related to flaws in the authorization mechanism. for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to a flaw...