The vulnerability of the Web Listener component of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Titan SFTP and Titan MFT NextGen server software lies in improper default permissions, allowing unauthorized access by attackers to protected information.

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in incorrect default permissions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the library for working with image files, libXpm, related to a read-out error beyond the memory boundaries, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the libXpm library for working with image files is related to a read access exception that occurs beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20231018-02

The libXpm image file library vulnerability is related to a read error call outside of memory boundaries. outside of memory boundaries. Exploitation of the vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2023-6561 · Zchunk +4 · Zchunk +4

Name of the Vulnerable Software and Affected Versions: zchunk versions prior to 1.3.2 Description: The issue is related to integer overflows in components such as lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c. This can be exploited via malformed zchunk files,...

The vulnerability affects the runtime of procedure calls in the Windows operating system, allowing attackers to exploit it to disclose sensitive information that is protected by security measures.

The vulnerability of the Remote Procedure Call component in the Windows operating system is related to the disclosure of information in the error data field. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service-related data. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the xfrm_dump_sa() function in the net/xfrm/xfrm_user.c module of the XFRM subsystem in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the xfrmdumpsa function in the net/xfrm/xfrmuser.c module of the XFRM subsystem in the Linux operating system is related to reading beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information...

PT-2023-6373 · Wago · Wago

Name of the Vulnerable Software and Affected Versions: Wago products affected versions not specified Description: The issue allows a remote attacker with administrative privileges to access files through an undocumented local file inclusion. This access is logged in a different log file than...

The vulnerability in the Windows operating system’s power management service allows attackers to exploit it to disclose protected information.

The vulnerability of the Windows operating system’s power management service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Share Sheet component in operating systems such as watchOS, iPadOS, iOS, and macOS allows a hacker to disclose protected information.

The vulnerability of the Share Sheet component in operating systems such as watchOS, iPadOS, iOS, and macOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose sensitive information...

The vulnerability of the crosvm component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the crosvm component in Google Chrome relates to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Google Chrome’s Autofill function allows attackers to influence the integrity of the protected information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by loading a specially created HTML page...

The vulnerability of the full-screen mode implementation in Google Chrome allows a perpetrator to influence the integrity of the protected information.

The vulnerability of the full-screen browser mode implementation in Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to influence the integrity of protected information by installing a malicious...

The vulnerability of Google Chrome’s Autofill function allows attackers to exploit it to disclose protected information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of operational data, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the WordPad text editor on the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the WordPad text editor on the Windows operating system is related to the disclosure of NTLM passwords. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

CVE-2023-4957

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

Authentication flaw

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the...

CVE-2023-4957

CVE-2023-4957 affects Zebra Technologies ZTC industrial printers (ZT410) and GK420d desktop models. A authentication-bypass flaw allows an attacker on the same network to alter web-page credentials by sending a crafted POST to setvarsResults.cgi when the printer’s protected mode is disabled. Repo...