12994 matches found
Tecnick TCExam Security Breach
Tecnick TCExam is a Web-based open source e-exam system from Tecnick UK. The system is mainly used for online exams, etc. A security vulnerability exists in Tecnick TCExam versions prior to 15.1.0, which stems from an insufficiently protected external authorization mechanism in the admin folder...
The vulnerability of the getModBusPassword method in the software for controlling power supply sources of Voltronic Power ViewPower allows a intruder to gain unauthorized access to protected information.
The vulnerability of the “getModBusPassword” method in the software for controlling power supply sources of Voltronic Power ViewPower Pro is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acce...
The vulnerability of the Go programming language’s net/http package, which allows attackers to exploit and disclose protected information
The vulnerability of the net/http package in the Go programming language is related to the exposure of sensitive information. Exploiting this vulnerability allows an attacker, operating remotely, to disclose protected information...
CVE-2023-42929
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...
CVE-2023-42929
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...
CVE-2023-38612
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2023-38612
The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data...
CVE-2023-42929
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...
CVE-2023-42929
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access protected user data...
CVE-2023-29447 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credentials as the web server uses basic authentication...
Apple macOS Ventura Security Vulnerability
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which originates from an application that may be able to modify protected portions of the file system...
The vulnerability of the catalog-import function of the online software development platform Red Hat Developer Hub allows a hacker to disclose protected information.
The vulnerability of the catalog-import function on the online software development platform Red Hat Developer Hub is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
Apple iOS and iPadOS Security Vulnerabilities
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 16.7 and iPadOS version 16.7, which originates from an application th...
Apple macOS Sonoma Security Vulnerability
Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access protected user data...
Microsoft Windows Multiple Vulnerabilities (KB5034127)
This host is missing an important security update according to Microsoft KB5034127 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Null pointer dereference
jwx is a Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. The vulnerability can be used to crash/DOS ...
CVE-2024-21305
Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...