The vulnerability of the embedded software of NETGEAR routers such as D6220, D6400, D7000v2, D8500, DC112A, DGN2200v4, EAX80, R6250, R7000, R7100LG, R7900, R7960P, R8000, RAX200, RS400, XR300, R6400v2, R7000P, R8000P, RAX20, RAX45, RAX80, R6700v3, R6900P, R7900P, RAX15, RAX50, RAX75 arises due to buffer overflows, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the embedded software of NETGEAR routers such as D6220, D6400, D7000v2, D8500, DC112A, DGN2200v4, EAX80, R6250, R7000, R7100LG, R7900, R7960P, R8000, RAX200, RS400, XR300, R6400v2, R7000P, R8000P, RAX20, RAX45, RAX80, R6700v3, R6900P, R7900P, RAX15, RAX50, RAX75 arises due to...

CVE-2021-44166

An improper access control vulnerability CWE-284 in FortiToken Mobile Android external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the...

The vulnerability of the CodeMeter license control application, related to errors in resource release, allows a violator to disclose the protected information.

The vulnerability of the CodeMeter license control application is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to disclose protected information by sending specially crafted data...

PT-2022-2953 · Amd +8 · Amd Cpus +8

Name of the Vulnerable Software and Affected Versions: AMD CPUs affected versions not specified Description: The issue is related to the LFENCE/JMP module in AMD CPUs, specifically concerning the branch prediction mechanism. This allows an attacker to access protected memory from a program withou...

The vulnerability of the Power BI visualization application’s JavaScript SDK lies in the ability to disclose information in erroneous data fields, allowing an attacker to disclose protected information.

The vulnerability of the Power BI visualization application’s JavaScript SDK relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...

The vulnerability of the Microsoft Office software, related to the disclosure of information in the erroneous data area, allows for the disclosure of protected information.

The vulnerability of the Microsoft Office suite is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the OneDrive for Android file storage service, related to incorrect authentication, allows a perpetrator to gain access to protected information.

The vulnerability of the OneDrive for Android file storage service is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the kvm_s390_guest_sida_op() function in the KVM virtualization subsystem of Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the kvms390guestsidaop function in the KVM virtualization subsystem of Linux operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Vulnerability of the gadget_dev_desc_UDC_show function in the Android operating system’s kernel, allowing a hacker to gain unauthorized access to protected information

The vulnerability of the gadgetdevdescUDCshow function in the Android operating system’s kernel is related to the disclosure of information in an unauthorized data area. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

The vulnerability of the SDDC controller in the VMware Cloud Foundation virtualization platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SDDC controller of the VMware Cloud Foundation virtualization platform is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Vulnerability of the check_alu_op() function (kernel/bpf/verifier.c) in Linux operating system kernels, which allows an attacker to gain unauthorized access to protected information

The vulnerability of the checkaluop function kernel/bpf/verifier.c in Linux operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Mozilla Firefox’s Web Workers mechanism and Mozilla Thunderbird’s email client allows attackers to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox’s Web Workers mechanism and Mozilla Thunderbird’s email client relates to the disclosure of information. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Windows GDI component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...

CVE-2022-23431

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2022-23431

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...

CVE-2021-22798

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause Sensitive data such as login credentials being exposed when a Network is sniffed. Affected Product: Conext� ComBox All Versions...

CVE-2021-22798

The CVE-2021-22798 issue affects Schneider Electric Conext ComBox (All Versions) and is described as CWE-522: Insufficiently Protected Credentials. The vulnerability could allow exposure of sensitive data (e.g., login credentials) when a network is sniffed. Root cause: credentials are not adequat...

PT-2022-16404 · Unknown · Link Sharing

Name of the Vulnerable Software and Affected Versions: Link Sharing versions prior to 12.4.00.3 Description: The issue allows attackers to open protected activity via PreconditionActivity due to an improper authorization vulnerability in Link Sharing. Recommendations: For versions prior to...

BD Viper LT 信任管理问题漏洞

BD Viper LT is a fully automated, integrated molecular test from BD Medical, Inc. The BD Viper LT suffers from a trust management issue vulnerability that can be exploited by an attacker to threaten participants who may be able to access, modify, or delete sensitive information, including protect...