13097 matches found
PT-2023-6635 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to obfuscate security UI via a crafted HTML page...
PT-2023-6644 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to a use after free in Reading Mode, which could allow a remote attacker to potentially exploit heap corruption via specific UI gestures if a user is convinced t...
The vulnerability of the EisBaer SCADA system, related to the improper assignment of permissions for critical resources, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SCADA system of EisBaer is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the SCADA system EisBaer, related to the disclosure of information, allows a intruder to gain unauthorized access to the protected information.
The vulnerability of the SCADA system of EisBaer is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the EisBaer SCADA system, which stems from the use of a strictly encrypted cryptographic key, allows attackers to gain unauthorized access to protected information.
The vulnerability of the EisBaer SCADA system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
The vulnerability of the Jenkins MSTeams Webhook Trigger Plugin, related to the disclosure of information, allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Jenkins MSTeams Webhook Trigger Plugin is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Jenkins Gogs Plugin, related to the disclosure of information, allows a malicious actor to gain unauthorized access to the protected information.
The vulnerability of the Jenkins Gogs Plugin is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Jenkins lambdatest-automation plugin, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Jenkins lambdatest-automation Plugin is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
ROS-20231030-01
A vulnerability in the modmacro component of the Apache HTTP Server web server is related to an out-of-field read. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...
The vulnerability of the Jenkins Multibranch Scan Webhook Trigger Plugin, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Jenkins Multibranch Scan Webhook Trigger Plugin is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Zoom video conferencing service, related to the unencrypted storage of critical information, allows attackers to gain access to protected data.
The vulnerability of the Zoom video conferencing service is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to gain access to protected data...
The vulnerability of the Lightdash data visualization and analysis tool lies in the improper restriction of the path name to the restricted access catalog, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Lightdash data visualization and analysis tool is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component of the Oracle PeopleSoft Products allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Events & Notifications sub-component of the PeopleSoft Enterprise CC Common Application Objects component in the Oracle PeopleSoft Products suite of business applications is related to insufficient validation of input data. Exploiting this vulnerability may allow an...
Motorola MR2600 License Issues Vulnerability
The Motorola MR2600 is a wireless router from Motorola. An authorization issue vulnerability previously existed in the Motorola MR2600 v1.0.18, which stemmed from a brute-force cracking of the WPS PIN code when in range of a wireless network, allowing unauthorized access to the wireless network...
CVE-2023-46664
Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages...
CVE-2023-46664
Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability attackers can bypass authorization and access resources behind protected pages...
CVE-2023-46663
Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests...
The vulnerability of Microsoft Edge browser (based on Chromium) relates to the lack of protection for service data, allowing a perpetrator to disclose protected information.
The vulnerability of Microsoft Edge based on Chromium is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
