12991 matches found
PT-2024-15723 · WordPress · The Password Protected – Ultimate Plugin To Password Protect Your Wordpress Content With Ease
Name of the Vulnerable Software and Affected Versions: The Password Protected – Ultimate Plugin to Password Protect Your WordPress Content with Ease plugin for WordPress versions up to, and including, 2.6.6 Description: The issue is related to Stored Cross-Site Scripting via the Google Captcha Si...
The vulnerability of the tool_cb_wrt component (src/tool_cb_wrt.c) in the command-line utilities curl and tiny-curl, which allows a attacker to disclose protected information
The vulnerability of the toolcbwrt component src/toolcbwrt.c in the command-line utilities curl and tiny-curl is related to a shift of one index position in the array index beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose...
CVE-2023-6259
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3...
CVE-2023-6259
The CVE-2023-6259 issue affects Brivo ACS100 and ACS300 (versions 5.2.4 through 6.2.4.3). The root cause is Insufficiently Protected Credentials and Improper Access Control, enabling Password Recovery Exploitation and bypassing physical security. If exploited, this could allow unauthorized access...
CVE-2023-6259 Local Access to Sensitive Data in Brivo ACS100 and ACS300
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3...
CVE-2023-6259 Local Access to Sensitive Data in Brivo ACS100 and ACS300
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3...
The vulnerability of the PEAP (Protected Extensible Authentication Protocol) client implementation of the Wi-Fi Protected Access Point software WPA Supplicant allows a hacker to intercept the unencrypted user traffic.
The vulnerability of the PEAP Protected Extensible Authentication Protocol client Wi-Fi access control implementation, such as WPA Supplicant, arises due to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept unencrypted user traffic by...
The vulnerability of the Skype for Business Server’s instant messaging program, related to insufficient protection of sensitive data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Skype for Business Server’s instant messaging program is related to insufficient protection of sensitive data due to improper access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Windows operating system kernels is related to the exposure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the monitoring tool for VMware Aria Operations lies in the use of files and directories accessible from external parties, allowing a perpetrator to gain unauthorized access to protected information.
The vulnerability of the monitoring tool for VMware Aria Operations relates to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to the reading of data outside the buffer in memory when processing the numColorRecords parameter for OpenType font...
PT-2024-3919 · Ge Healthcare · Common Service Desktop
Name of the Vulnerable Software and Affected Versions: Common Service Desktop versions affected versions not specified Description: The issue is related to a path traversal vulnerability in the getAllFolderContents function of the Common Service Desktop component in GE HealthCare ultrasound...
Nextcloud: Attachments folder for Text app is accessible on Files Drop/Password protected shares
The Nextcloud Text app's attachments folder was found to be accessible on Files Drop/Password protected shares...
Nextcloud: Possible to enumerate valid files in password protected shares/files drop shares as well as spam folder with files
The summary is as follows: It was possible to enumerate valid files in password protected shares and file drop shares. Additionally, it was possible to spam the folder with empty files using an attacker-controlled file name. The vulnerability existed in the DocumentAPIControllercreate method, whi...
CVE-2024-0015
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
Exploit for Improper Input Validation in Microsoft
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...
New Security Advisory Tab Added to the Microsoft Security Update Guide
Today, we are adding a new Security Advisory tab to the Security Update Guide to meet our customers’ needs for a unified and authoritative source for the latest public information about Microsoft security updates and issues. We are continuously listening to feedback from users of the Security...
The vulnerability of the Apache Tomcat application server, related to the inconsistent interpretation of HTTP requests, allows attackers to compromise the integrity of the protected information.
The vulnerability of the Apache Tomcat application server is related to the inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
CVE-2023-6409
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert...
CVE-2023-27975
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation...