13102 matches found
The vulnerability of Omron CS/CJ automation controllers, related to the lack of authentication for critical functions, allows attackers to gain access to protected information.
The vulnerability of Omron CS/CJ automation controllers lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
PT-2023-7462
Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion affected versions not specified Description The issue is related to an out-of-bounds read that exists in the functionality for sharing host Bluetooth devices with the virtual machine. This could allow an attacker ...
The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer operating systems for Windows allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for operational data, which allows an attacker to gain unauthorized access to protected information.
The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Vulnerabilities of operating systems iOS and iPadOS, related to lack of access control, allow attackers to gain unauthorized access to protected information.
The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...
The vulnerability of the microprogramming software for Schneider Electric’s logic controllers for building and facility control systems, namely Schneider Electric’s spaceLYnk and Schneider Electric’s homeLYnk, stems from the use of a unreliable cryptographic algorithm. This vulnerability allows attackers to gain unauthorized access to protected information.
The vulnerability of the microprogramming software used in Schneider Electric’s logic controllers for building and facility control, such as Schneider Electric’s spaceLYnk and homeLYnk, is related to the use of a unreliable cryptographic algorithm. Exploiting this vulnerability could allow an...
The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain access to protected information.
The vulnerability of the Core server component of Oracle WebLogic Server is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information from a remote location...
CVE-2023-1371
The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them...
CVE-2023-1371 W4 Post List < 2.4.6 - Subscriber+ Password Protected Post Content Disclosure
The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content, which could allow any authenticated users to access them...
PT-2023-16937 · WordPress · W4 Post List
Name of the Vulnerable Software and Affected Versions: W4 Post List WordPress plugin versions prior to 2.4.6 Description: The issue arises because the plugin does not properly check access to password-protected posts before displaying their content. This could allow any authenticated users to...
PT-2023-2750 · Microsoft · Malware Protection Engine +1
Name of the Vulnerable Software and Affected Versions: Microsoft Malware Protection Engine MPE affected versions not specified Microsoft Defender affected versions not specified Description: The issue is related to a lack of protection for service data in the Microsoft Malware Protection Engine...
The vulnerability of Microsoft SharePoint Server software allows a perpetrator to compromise the integrity of protected information.
The vulnerability of Microsoft SharePoint Server packages is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of protected information through a specially crafted HTTP request...
The vulnerability of the CLFS log system driver for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CLFS log system driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Network File System NFS of Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Windows operating system kernels relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Microsoft Visual Studio software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Microsoft Visual Studio software development tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of D-Link DIR-882 wireless router’s microprogramming software allows a hacker to disclose protected information.
The vulnerability of the Syslog component in D-Link DIR-882 wireless routers relates to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in its report-generation mechanism’s deficiencies, which allows attackers to gain unauthorized access to protected information.
The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
