The vulnerability of the Apache Tomcat application server, related to deficiencies in the error reporting mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the “Ask to Buy” function in operating systems such as macOS, iOS, and iPadOS allows a hacker to disclose protected information.

The vulnerability of the “Ask to Buy” function in operating systems such as macOS, iOS, and iPadOS is related to lack of access control. Exploiting this vulnerability can allow a hacker to disclose protected information...

PT-2024-19982 · Motorola · Motorola Mr2600

Name of the Vulnerable Software and Affected Versions: Motorola MR2600 affected versions not specified Description: An authentication bypass issue exists in the web component, allowing an attacker to access protected URLs and retrieve sensitive information. Recommendations: At the moment, there i...

The vulnerability of the Find My function in macOS, iOS, and iPadOS allows a perpetrator to disclose protected information.

The vulnerability of the Find My function in macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Photos storage in operating systems such as macOS, iOS, and iPadOS allows attackers to disclose protected information.

The vulnerability of Photos storage in operating systems such as macOS, iOS, and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Splunk Enterprise platform for operational analysis allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information using the SPL command mrollup...

The vulnerability of cloud-based software for creating and using Nextcloud Server’s data storage system is related to improper access control. This allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Ip6IsOptionValid() function in the Tianocore edk2 library, which allows a attacker to compromise the accessibility of protected information or cause service failures.

The vulnerability of the Ip6IsOptionValid function in the Tianocore edk2 library is related to the execution of a loop with an unreachable exit condition when processing the PadN parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of protected...

The vulnerability of the Nginx UI server’s user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Nginx UI server’s user interface relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2024-10360 · Drupal · Open Social

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.0.4 Description: The issue is related to improper authorization in Drupal Open Social, allowing the collection of data from common resource locations. This can potentially lead to unauthorized access to...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data, allowing attackers to disclose protected information.

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications arises from the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the software for managing and controlling access to corporate resources and IBM Security Verify Governance applications lies in the use of pre-installed user accounts, which allows attackers to expose sensitive information that should be protected.

The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the IGMPv2 protocol implementation in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the IGMPv2 protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis lies in the lack of protection for operational data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the NSSpellChecker spelling checking interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the NSSpellChecker spelling checker interface on operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the macOS operating system’s terminal emulator allows a hacker to disclose protected information.

The vulnerability of the macOS terminal emulator is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to execute arbitrary control commands...

The vulnerability of the APFS component of the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the APFS component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems allows attackers to disclose protected information.

The vulnerability of the Contacts component in iOS, macOS, and iPadOS operating systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the software protection mechanism for accessing applications in Docker environments. IBM Security Verify Access Docker, a access control system from IBM Security Verify Access, is vulnerable due to the lack of encryption measures for protected data. This allows attackers to disclose the protected information.

The vulnerability of the IBM Security Verify Access application for Docker environments stems from the lack of encryption measures for protected data. Exploiting this vulnerability can allow attackers to disclose protected information...

CVE-2023-6447

The EventPrime WordPress plugin before 3.3.6 lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name...