The vulnerability of Intel microprogramming software, related to deficiencies in access control, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to errors during HTML sanitization, allows attackers to compromise the integrity of protected information.

The vulnerability of the Mozilla Firefox browser is related to errors during HTML sanitization. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the MediaError message in the Mozilla Firefox browser, which allows a violator to disclose protected information

The vulnerability of the MediaError message in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ex_diffgetput() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exdiffgetput function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the st_select_lex_unit::exclude_level function in the MariaDB database management system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the stselectlexunit::excludelevel function in the MariaDB database management system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the ins_bytes() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GHSA-5MXG-P5QH-2GCH Jenkins Deployment Dashboard Plugin has Insufficiently Protected Credentials

Jenkins Deployment Dashboard Plugin 1.0.10 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the credentials...

PT-2022-3488 · Xen +6 · Xen +6

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a disclosure of information in the Xen hypervisor Linux kernel. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At...

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists because the user on Firefox for Android could bypass the TLS certificate errors on HSTS-protected domains...

Design/Logic Flaw

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions parse Server LiveQuery does not remove protected fields in classes, passing them to the client. The LiveQueryController now removes protected fields from the client respons...

CVE-2022-31112 Protected fields exposed via LiveQuery in parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions parse Server LiveQuery does not remove protected fields in classes, passing them to the client. The LiveQueryController now removes protected fields from the client respons...

CVE-2022-31112 Protected fields exposed via LiveQuery in parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions parse Server LiveQuery does not remove protected fields in classes, passing them to the client. The LiveQueryController now removes protected fields from the client respons...

Oracle Linux 8 : curl (ELSA-2022-5313)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5313 advisory. - fix too eager reuse of TLS and SSH connections CVE-2022-27782 - fix credential leak on redirect CVE-2022-27774 - fix auth/cookie leak on redirect...

Parse Server 信息泄露漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server suffers from an information disclosure vulnerability that stems from the fact that the parsing server, LiveQuery, does not remove protected fields from classes and passes them to t...

PT-2022-20537 · Unknown · Parse Server

Name of the Vulnerable Software and Affected Versions: Parse Server affected versions not specified Description: The issue concerns Parse Server LiveQuery, which in affected versions does not remove protected fields in classes, passing them to the client. This has been addressed by the...

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to disclose protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Intel microprogramming software, related to improper code generation management, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel microprogramming software is related to improper code generation management. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the BIOS microprogramming system of Intel processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of the BIOS microprogramming system of Intel processors is related to incorrect checking of the return value. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...