GitLab 13.9 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22226)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9 CVE-2021-22226 Note that Nessus has not tested for...

The vulnerability of the Brocade SANnav network management software, due to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Brocade SANnav network management software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the QTS and QuTS operating systems in connection with QNAP network storage devices, caused by buffer overflows in the stack, allows attackers to compromise the integrity of protected information.

The vulnerability of the QTS and QuTS operating systems affects QNAP network storage devices, due to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit that allows an attacker to bypass memory buffers, thereby enabling them to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow attacke...

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the CMS system Netcat, related to deficiencies in authentication mechanisms, allows attackers to gain access to protected information.

The vulnerability of the CMS system Netcat is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in their memory management after it is freed. This allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed during the processing of AcroForms forms. Exploiting this...

CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

CVE-2024-27109 Insufficiently protected credentials in GE HealthCare EchoPAC products

Insufficiently protected credentials in GE HealthCare EchoPAC products...

WordPress Password Protected plugin <= 2.6.6 - Missing Authorization to Sensitive Information Exposure vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability discovered by Francesco Carlucci in WordPress Plugin Password Protected versions = 2.6.6...

May 14, 2024—KB5037781 (OS Build 25398.887)

None None...

PT-2024-3751

Name of the Vulnerable Software and Affected Versions: Microsoft Power BI Client JavaScript SDK affected versions not specified Description: The issue is related to insufficient input validation in the Power BI client JS SDK, which can be exploited by a remote attacker to gain unauthorized access...

PT-2024-3712 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to type confusion errors in the Windows Cloud Files Mini Filter Driver, which can be exploited to disclose protected information. This...

Siemens RUGGEDCOM APE1808

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

VulnCheck KEV: CVE-2024-21413

Microsoft Outlook contains an improper input validation vulnerability that allows for remote code execution. Successful exploitation of this vulnerability would allow an attacker to bypass the Office Protected View and open in editing mode rather than protected mode...

PT-2024-3713 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a buffer overflow in memory, which can lead to the disclosure of protected information. Attackers may exploit this to obtain sensiti...

PT-2024-3609 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to an integer overflow in the Windows DWM Core Library, which can be exploited to disclose protected information. This allows attackers to obtain...

WordPress Password Protected Plugin <= 2.6.6 is vulnerable to Broken Access Control

Software Password Protected Type Plugin Vulnerable versions = 2.6.6 Fixed in 2.6.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0437 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 9ba2b44f0023 Credits Francesco Carlucci Required...

WordPress plugin Password Protected 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

PT-2024-22110 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.5 macOS versions prior to 13.6.7 macOS versions prior to 14.5 Description: This issue was addressed with improved validation of symlinks. An app may be able to modify protected parts of the file system...