The vulnerability of the application for automatic capture, processing, management, and distribution of Opencast videos, related to the use of files and directories accessible to external parties, allows a violator to gain unauthorized access to protected information.

The vulnerability of the application for automatic capture, processing, management, and distribution of Opencast videos involves the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

The vulnerability of the Special:ChangeContentModel function in the software for implementing a hypertext environment like MediaWiki allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Special:ChangeContentModel function in the MediaWiki software, which is used to implement the hypertext environment, is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

Siemens SIMATIC S7-1200 and S7-1500 CPU Families

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Low attack complexity Vendor: Siemens Equipment: SIMATIC S7-1200 and S7-1500 CPU families Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could expose confidential configuration data...

The vulnerability of Firefox browser for iOS, related to authentication errors, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Firefox browser for iOS is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2022-2454)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2022-2566)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require th...

The vulnerability in the Firefox web browser, related to insufficient protection of service data, allows a hacker to gain unauthorized access to protected information.

The vulnerability in the Firefox web browser is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2022-2454)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to...

PT-2022-6237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory management vulnerability in the Linux kernel, specifically concerning the lack of randomization of exception handling stacks. This could allow an attacke...

The vulnerability of the PowerScale OneFS operating systems, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PowerScale OneFS operating system is related to deficiencies in the authentication process when using an expired account. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Vulnerability of the `getReadReceipts` method in the server-based corporate messaging system that supports file and video conferences. Chat, which allows attackers to expose sensitive information.

The vulnerability of the getReadReceipts method in the server-based corporate messaging system that supports file and video conferences. Chat involves insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to insufficient verification of data authenticity, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to insufficient verification of data authenticity. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Xen hypervisors, related to deficiencies in the authorization process, allows attackers to gain unauthorized access to protected information.

The vulnerability of Xen hypervisors is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

BD Totalys MultiProcessor 信任管理问题漏洞

The BD Totalys MultiProcessor is a medical device from Bidi Medical BD, USA. combines full automation of the cell enrichment process for cervical samples, a strict chain of custody, and customizable small samples for ancillary testing. The BD Totalys MultiProcessor suffers from a trust management...

The vulnerability of the stex_queuecommand_lck() function in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the stexqueuecommandlck function in Linux operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to a lack of mechanism for verifying the source, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the header_value function in the embedded operating system OpenWrt allows a hacker to gain access to protected information.

The vulnerability of the headervalue function in the embedded operating system OpenWrt relates to the ability to read data beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information by sending a specially craft...

The vulnerability of the Hubs Cloud Reticulum software, related to insecure proxy server configurations, allows attackers to disclose protected information.

The vulnerability of the Hubs Cloud Reticulum software is related to insecure proxy server configurations. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the Mozilla Firefox browser for Windows, related to information disclosure, allows a hacker to expose protected information.

The vulnerability of the Mozilla Firefox browser for Windows is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...