The vulnerability of the Blog2Social plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Blog2Social plugin of the WordPress content management system is related to insufficient protection of administrative data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-2859

By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account...

CVE-2024-32883

MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV tag-length-value structure to represent the meta data associated with an image. The TLVs themselves are divided into two sections, a protected and an unprotected section. The protected TLV entries are included as part...

CVE-2024-3678

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2. This makes it possible for unauthenticated attackers to view limited information from password protected posts...

CVE-2024-3678 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2. This makes it possible for unauthenticated attackers to view limited information from password protected posts...

CVE-2024-3678 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2. This makes it possible for unauthenticated attackers to view limited information from password protected posts...

CVE-2024-33671

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files...

CVE-2024-33672

An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files...

CVE-2024-33672

An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Claim LOV component of the Oracle Trade Management software, a part of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Claim LOV component of the Oracle Trade Management software for trading operations management in the Oracle E-Business Suite is related to insufficient validation of input data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access t...

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...

CVE-2024-33672

An issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary file deletion on protected files...

The vulnerability of Microsoft Edge browser on Android, related to errors in cookie handling, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge browser for Android involves errors in cookie handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-33672

CVE-2024-33672 affects Veritas NetBackup prior to 10.4. The Multi-Threaded Agent can be used to perform arbitrary file deletion on protected files, per multiple connected sources. Reported impact includes high confidentiality/availability implications (C/I = HIGH, A = HIGH) with local attack vect...

The vulnerability of the zgfx_decompress_segment() function in the RDP client FreeRDP, which allows a hacker to disclose protected information

The vulnerability of the zgfxdecompresssegment function in the RDP client FreeRDP involves reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by this function...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to disclose protected information.

The vulnerability of the Remote Access Connection Manager in Windows operating systems relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the idxd component in the Linux operating system’s kernel allows a attacker to compromise the integrity of the protected information.

The vulnerability of the idxd component in the Linux operating system’s kernel is related to the writing of pasid when a device is disabled. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the idxd component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the idxd component in the Linux operating system’s kernel is related to the absence of registry cleanup for WQCFG. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...