The vulnerability of the SAP Host Agent, a software tool for managing product lifecycles, stems from deficiencies in the authentication process. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Product Lifecycle Management Software, SAP Host Agent, is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PackageKit component in the macOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of PackageKit component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Memory Integrity System Readiness Scan Tool Defense in Depth Update

The Memory Integrity System Readiness Scan Tool hvciscanamd64.exe and hvciscanarm64.exe is used to check for compatibility issues with memory integrity, also known as hypervisor-protected code integrity HVCI. The original version was published without a RSRC section, which contains resource...

PT-2023-4677 · Unknown · Mxsecurity

Name of the Vulnerable Software and Affected Versions: MXsecurity versions prior to v1.0.1 Description: The issue is related to inadequate authentication measures in the MXSecurity platform, which can allow a remote attacker to gain unauthorized access to protected information. This can potential...

The vulnerability of the ConnectionStrings.config component in the “Terrasoft” CRM system and the “Creatio” BPM system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ConnectionStrings.config component in the “Terrasoft” CRM system and the “Creatio” BPM system is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

PT-2023-4381 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Cryptographic Services, which can be exploited to disclose protected information. This...

The vulnerability of the Find My component in operating systems such as macOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Find My component in operating systems such as macOS, iOS, iPadOS, and watchOS is related to the disclosure of information. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

PT-2023-4376 · Microsoft · Windows Group Policy +1

Name of the Vulnerable Software and Affected Versions: Windows Group Policy affected versions not specified Description: The issue is related to a security feature bypass in the Windows Group Policy component, which is associated with a lack of protection for service data. This could allow an...

The vulnerability of the web page rendering modules in WebKitGTK+ and WPE WebKit operating systems for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Web page rendering modules in WebKitGTK+ and WPE WebKit operating systems for iOS, iPadOS, tvOS, macOS, watchOS, and the Safari browser is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to...

GitLab 0 < 16.0.8 / 16.1.0 < 16.1.3 / 16.2.0 < 16.2.2 (CVE-2023-2022)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to...

The vulnerability of the Runtime Workbench component of the SAP NetWeaver Process Integration software, which allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Runtime Workbench RWB component of the SAP NetWeaver Process Integration software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of protected information...

WordPress wpShopGermany – Protected Shops Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Software wpShopGermany – Protected Shops Type Plugin Vulnerable versions = 2.0 Fixed in 2.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-39919 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 210ff9ae9fe3 Credits DoYeon Park p6rkdoye0n...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in state management errors caused by excessive amounts of cookies in the document.cookie file. This allows attackers to influence the integrity of the protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to state management errors caused by excessive amounts of cookies in the document.cookie file. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected informati...

The vulnerability of Java-Framework templates in the Apache Camel framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java framework Apache Camel is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the MacOS operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the MacOS operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Business Logic Flaws

GitLab is vulnerable to Business Logic Flaws. The vulnerability exists under specific conditions, which allows an unauthorised project members to delete a protected branches...

CVE-2020-26082

A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass content filters that are configured on an affected device. The vulnerability is due to improper handling of password-protected...

The vulnerability of the Google Update component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Update component in Google Chrome browser relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...

CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...