Google Android elevation of privilege vulnerability (CNVD-2022-43233)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking in TBD's TBD, which can be exploited to bypass PIN validation to access PIN-protected settings. An attacker...

The vulnerability of the do_soap_call function (ext/soap/soap.c) in the PHP programming language allows a hacker to gain access to protected information.

The vulnerability of the dosoapcall function ext/soap/soap.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information...

The vulnerability of the dsa_sign_setup function in the OpenSSL library, which relates to the disclosure of protected information, allows attackers to circumvent cryptographic mechanisms used for encryption protection.

The vulnerability of the dsasignsetup function in the OpenSSL library is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to circumvent the cryptographic mechanisms used for encryption protection...

Ubuntu 18.04 LTS / 20.04 LTS : Barbican vulnerabilities (USN-5387-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5387-1 advisory. Douglas Mendizbal discovered that Barbican incorrectly handled access restrictions. An authenticated attacker could possibly use this issue t...

Cisco Umbrella Secure Web Gateway文件解密绕过漏洞

Cisco Umbrella is a cloud security platform from the U.S. company Cisco Cisco. The platform prevents cyber threats such as phishing, malware and ransomware.Cisco Umbrella Secure Web Gateway has a file decryption bypass vulnerability that can be exploited by authenticated attackers to bypass the...

The vulnerability of the audit log of the Cisco Digital Network Architecture (DNA) Center allows attackers to disclose protected information.

The vulnerability of the audit journal of the Cisco Digital Network Architecture DNA Center relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to disclose protected information...

Slackware: Security Advisory (SSA:2016-106-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

A malicious actor having access to the exported configuration file may obtain the stored credentials and thereby gain access to the protected resource. If the same passwords were used for other resources, further such assets may be compromised...

The vulnerability of the timelib_meridian() function in the PHP programming language allows a attacker to compromise the confidentiality of sensitive information.

The vulnerability of the timelibmeridian function in the PHP programming language is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of sensitive information...

The vulnerability of Siemens’ TFTP-server implementation for software and software-hardware products arises from the operation that goes beyond buffer boundaries in memory, allowing attackers to gain access to protected information.

The vulnerability of the TFTP server implementation for Siemens’ software and software-hardware products lies in the fact that the operation is carried out outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to protected information by sending...

The vulnerability of the Direct Memory Access (DMA) subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the exif_process_ifd_in_tiff function in the PHP programming language allows attackers to disclose protected information.

The vulnerability of the exifprocessifdintiff function ext/exif/exif.c in the PHP programming language is related to the disclosure of protected information. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...

The vulnerability in the `ext/standard/link_win32.c` component of the PHP interpreter allows a perpetrator to compromise data confidentiality.

The vulnerability of the ext/standard/linkwin32.c component of the PHP interpreter involves exposing protected information. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality remotely...

The vulnerability of the Display Key Combination Fast Access swhkd mechanism in the Wayland display server protocol allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the Display Key Combination Fast Access daemon, swhkd, in the Wayland display server protocol is related to the ability to connect to the UNIX domain socket /tmp/swhkd.sock. Exploiting this vulnerability allows a remote attacker to gain access to protected information or caus...

The vulnerability of the simplexml_load_file() function in the PHP interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability of the simplexmlloadfile function in the PHP interpreter is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability in the isolated environment of the iframe in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a malicious actor to disclose protected information.

The vulnerability in the isolated environment of the Firefox web browser, Firefox ESR, and Thunderbird email client relates to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Red Lion DA50N has an unspecified vulnerability (CNVD-2022-65326)

Red Lion DA50N is a series of secure edge network gateways from Red Lion, U.S.A. A security vulnerability exists in the Red Lion DA50N that could be exploited by an attacker to gain access to stored credentials and thereby gain access to protected resources...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 involve reading data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

The vulnerability of Adobe Audition’s audio editor, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...