The vulnerability of Moxa TN-5900 series router microprogramming software, related to inconsistencies in responses to incoming requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of Moxa TN-5900 series router microprogramming software is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the application development environment for ISaGRAF programmable logic controllers allows attackers to access password information stored in an unencrypted form, thereby enabling them to compromise the protected data.

The vulnerability in the development environment for ISaGRAF Runtime Rockwell Automation applications relates to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow a hacker to disclose the protected information...

The vulnerability in the cedrus_remove() function within the drivers/staging/media/sunxi/cedrus/cedrus.c driver of the Allwinner sunXi Linux operating system, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in cedrusremove within the drivers/staging/media/sunxi/cedrus/cedrus.c driver of the Allwinner sunXi Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the access control service for remote catalogs and the authentication mechanism sssd, related to the transmission of confidential information to unauthorized entities, allows attackers to disclose the protected information.

The vulnerability of the access control service for remote catalogs and the authentication mechanism of sssd is related to the disclosure of information when an unauthorized user is brought back to the sssd’s home directory, allowing access to the file system. Exploiting this vulnerability can...

The vulnerability of the Hotspot component in the Java SE software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Java SE software platform’s hotspot component is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

GitLab 13.7 < 15.11.10 / 16.0 < 16.0.6 / 16.1 < 16.1.1 (CVE-2023-2576)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1. Th...

CVE-2022-48505

This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...

PT-2023-9613 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 8.0 through 16.3 Description: The issue concerns the insufficient warning about security implications of granting merge rights to protected branches in GitLab EE/CE. This could potentially lead to exposure of sensitive...

The vulnerability of microprogrammed software for power measuring instruments and energy counters from Schneider Electric’s PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, and PowerLogic ION8800 lies in the transmission of data in an open manner, allowing attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed software for power measurement instruments and energy counters from Schneider Electric’s PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, and PowerLogic ION8800 lies in the transmission of data in an open manner. Exploiting this...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura that originates from an application that may be able to modify protected portions of the file system...

CVE-2023-3371

The EmbedPress plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lockcontentformhandler' and 'displaypasswordform' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt and view...

CVE-2023-3371

The User Registration plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lockcontentformhandler' and 'displaypasswordform' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt an...

Hardcoded credentials

The User Registration plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'lockcontentformhandler' and 'displaypasswordform' function in versions up to, and including, 3.7.3. This makes it possible for unauthenticated attackers to decrypt an...

WordPress Password Protected Plugin < 2.6.3 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:passwordprotected"; if description...

WordPress plugin EmbedPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-7499 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Edge, allowing a remote attacker to gain unauthorized access to protected information. Recommendations: ...

CVE-2023-30902

A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations...

Microsoft Edge browser’s vulnerability, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge relates to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the VMware ESXi hypervisor, related to writing beyond the buffer boundaries in memory, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the VMware ESXi hypervisor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2023-9656 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue arises from a boundary error when processing files, allowing a malicious actor to potentially gain unauthorized access to protected information, execute arbitrary code, o...