13106 matches found
The vulnerability of the Adobe Framemaker desktop publishing system, related to writing beyond the buffer boundaries in memory, allows a hacker to disclose protected information.
The vulnerability of the Adobe Framemaker desktop publishing system lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Schneider Electric Modicon PLCs Insufficiently Protected Credentials (CVE-2017-6028)
An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...
CVE-2022-46704
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system...
CVE-2022-46713
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system...
Apple macOS 竞争条件问题漏洞
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Ventura prior to 13, macOS Monterey prior to 12.6.1, and macOS Big Sur prior to 11.7.1. An attacker can exploit the vulnerability to modify protected portions of...
The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Internet Storage Name Service iSNS on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Protected Extensible Authentication Protocol (PEAP) implementation in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Protected Extensible Authentication Protocol PEAP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted PEAP packets...
K23642330: Multiple WPA2 vulnerabilities (KRACK)
Security Advisory Description CVE-2017-13077 Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the pairwise key in the four-way handshake. CVE-2017-13078 Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Group Temporal Key GTK during the four-way handshake, allowing an...
K11270891: Multiple Intel Linux Wi-Fi Drivers vulnerabilities CVE-2020-12313, CVE-2020-12317, CVE-2020-12319, CVE-2017-13080
Security Advisory Description CVE-2020-12313 Insufficient control flow management in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-12317 Improper buffer restriction in...
K55539088: Intel SSD vulnerabilities CVE-2020-0584, CVE-2020-12309, CVE-2020-12310, CVE-2020-12311
Security Advisory Description CVE-2020-0584 Buffer overflow in firmware for IntelR SSD DC P4800X and P4801X Series, IntelR OptaneTM SSD 900P and 905P Series may allow an unauthenticated user to potentially enable a denial of service via local access. CVE-2020-12309 Insufficiently protected...
K51048910: Eclipse Jetty vulnerability CVE-2021-28169
Security Advisory Description For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the...
K30857274: Intel QAT vulnerability CVE-2020-12333
Security Advisory Description Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12333 Impact There is no impact; F5 products are not affected by this...
The vulnerability relates to the implementation of the AMD Secure Processor (ASP) technology in AMD microprogrammed software processor BIOS systems. It allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the implementation of the AMD Secure Processor ASP technology in AMD microprogrammed computer system BIOS is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protect...
The vulnerability of the implementation of the AMD Secure Processor (ASP) microprogramming software for AMD processors allows a perpetrator to influence the integrity of the protected information.
The vulnerability of the AMD Secure Processor ASP microprogramming software for AMD processors lies in insufficient data validation during the translation of input/output addresses. Exploiting this vulnerability could allow a malicious actor to influence the integrity of the protected information...
WordPress Protected Posts Logout Button Plugin <= 1.4.5 is vulnerable to Broken Access Control
Software Protected Posts Logout Button Type Plugin Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25454 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 524d5fc86c25 Credits yuyudhn Require...
The vulnerability of the control panel of the microprogrammed communication Ethernet modules of Bosch B420 allows a hacker to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the control panel of Bosch B420 communication Ethernet modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and gain unauthorized access to protected information by sending specially crafted...
WordPress Protected Posts Logout Button Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)
Software Protected Posts Logout Button Type Plugin Vulnerable versions = 1.4.5 Fixed in 1.4.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25978 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID d608c5ad8a1b Credits yuyudhn...
The vulnerability of the AMD Secure Encrypted Virtualization (SEV) implementation, a micro-software solution for AMD processors, allows attackers to disclose protected information.
The vulnerability of the AMD Secure Encrypted Virtualization SEV technology, a micro-software solution for AMD processors, arises from the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the System Management Mode (SMM) implementation in AMD microprogramming software allows a attacker to influence the integrity of the protected information.
The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to influence the integrity of protected information...
