The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxslt library in iPadOS, tvOS, iOS, watchOS, and macOS relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the Zephyr real-time operating system’s Bluetooth protocol implementation allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Zephyr real-time operating system’s Bluetooth protocol implementation is related to errors in representing certain functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-29441 · 1E · 1E Client

Name of the Vulnerable Software and Affected Versions: 1E Client versions 8.1 through 9.0 Description: The 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of protected information, allows attackers to disclose such information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2023-24844

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range...

CVE-2023-24844 Improper Access Control in Core

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range...

CVE-2023-24844 Improper Access Control in Core

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range...

The vulnerability of component xrdp_painter.c in the XRDP server allows a attacker to access protected information.

The vulnerability of the xrdppainter.c component in the XRDP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom’s video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stem...

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS allows a hacker to disclose protected information.

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2023-19820 · Qualcomm · Snapdragon +38

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the core when invoking a call to the Access Control core library with a hardware-protected address range. No...

Code injection

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

UBUNTU-CVE-2023-5198

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

UBUNTU-CVE-2023-0989

An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows an attacker to extract non-protected CI/CD variables by tricking a user to visit a fork with a malicious CI/CD configuration...

CVE-2023-5198 Incorrect Authorization in GitLab

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

CVE-2023-5198

Summary: CVE-2023-5198 affects GitLab installations older than 16.2.7, and releases 16.3 before 16.3.5 and 16.4 before 16.4.1. The root cause is an issue where a removed project member could write to protected branches via deploy keys. Affected software: GitLab (versions prior to 16.2.7; 16.3.x b...

CVE-2023-5198 Incorrect Authorization in GitLab

An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16.4 before 16.4.1. It was possible for a removed project member to write to protected branches using deploy keys...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that stems from a deleted project...

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to out-of-memory reading, allows attackers to disclose protected information.

The vulnerability of the PDF document viewing and editing software PDF-XChange is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created TIF file...