XWiki Platform xwiki-platform-oldcore Unauthorized Access

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes security flaws in access control for personal information. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to...

CVE-2025-54394: Insufficiently Protected Credentials

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources...

PT-2025-32280 · Netwrix +1 · Netwrix Directory Manager +1

Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager versions 11.0.0.0 through 11.1.25162.01 Description: Netwrix Directory Manager formerly Imanami GroupID is susceptible to insufficient protection of credentials when processing requests for remote Excel resources...

CVE-2025-54394

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 has Insufficiently Protected Credentials for requests to remote Excel resources...

PackageKit macOS Data Compromise

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and compromise the confidentiality, integrity, and accessibility of protected information...

iPadOS macOS Link Handling Data Compromise

The vulnerability of iPadOS and macOS operating systems is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Data Compromise Component Disclosure

The vulnerability of the “Accessibility” component in iOS and iPadOS operating systems is related to deficiencies in restricting access to personal information. Exploiting this vulnerability can allow attackers to disclose protected information...

ImageIO Unprotected Access

The vulnerability of the ImageIO component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to reading data beyond the buffer limit of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CoreMedia Playback Unauthorized Access

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Find My Function Disclosure

The vulnerability of the Find My function in macOS and iPadOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose sensitive information...

NVIDIA Graphics Processor Information Disclosure

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the disclosure of system data by unauthorized individuals. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected information...

CVE-2025-38739

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2025-38739

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2025-38739

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure...

ELMED MIS Access Control

The vulnerability of the ELMED MIS platform is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its confidentiality, integrity, and accessibility...

WeGIA web manager SQL Injection Unauthorized Access

The vulnerability of the WeGIA web manager for charitable organizations is related to the failure to implement measures to protect the SQL query structure when processing the id parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

MCP Protocol Unauthorized Access

The vulnerability of the MCP protocol of the server-filesystem relates to the incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Sandbox macOS Unauthorized Access

The vulnerability of the Sandbox component in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...

PT-2025-31826 · Dell · Dell Digital Delivery

Name of the Vulnerable Software and Affected Versions: Dell Digital Delivery versions prior to 5.6.1.0 Description: Dell Digital Delivery contains an Insufficiently Protected Credentials issue. A remote, unauthenticated attacker could potentially exploit this, leading to Information Disclosure...

Firewall Software Unauthorized Access

The vulnerability of the Moby container isolation system’s Firewall software relates to improper initialization of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...