The vulnerability of the portal/patient/_machine_config.php component of the software for managing medical organizations OpenEMR allows a intruder to gain unauthorized access to protected information.

The vulnerability of the portal/patient/machineconfig.php component of the software for managing medical organizations OpenEMR is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gai...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the boundaries of the memory buffer. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information through a specially crafted PDF file...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...

The vulnerability of the Symfony software platform for developing and managing web applications relates to information disclosure, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Symfony software platform for developing and managing web applications is related to the exposure of sensitive information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2021-33540

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

Design/Logic Flaw

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

CVE-2021-33540

The CVE affects Phoenix Contact AXL F BK and IL BK devices, where an undocumented password-protected FTP access to the root directory exists. The root cause is an insecure/undocumented FTP auth path, enabling access to the device’s root filesystem. The available data indicate a high-severity impa...

Phoenix Contact AXL F BK and IL BK 信任管理问题漏洞

Phoenix Contact AXL F BK PN is a bus coupler from Phoenix Contact, Germany. A security vulnerability exists in the Phoenix Contact AXL F BK and IL BK that stems from the program having undocumented password-protected FTP access to the root directory...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the eBPF subsystem in the Linux operating system is related to a type conversion error. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

The vulnerability of the Dovecot mail server, related to errors in the encapsulation fields kid and azp in JWT tokens, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Dovecot mail server is related to errors in the encapsulation of fields “kid” and “azp” in JWT tokens. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in Eclipse Jetty used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-28163 DESCRIPTION: In Eclipse Jetty 9.4.32 to...

The vulnerability of the libxml2 library in operating systems such as iOS, iPadOS, macOS, tvOS, watchOS, the multimedia player iTunes, and the iCloud service allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libxml2 library in iOS, iPadOS, macOS, tvOS, watchOS, the multimedia player iTunes, and the iCloud service arises due to a buffer overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the ContentModelChange function in the software for implementing a hypertext environment like MediaWiki allows attackers to compromise the integrity of the protected information.

The vulnerability of the ContentModelChange function in the MediaWiki software, which is used to implement the hypertext environment, relates to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel is related to errors in processing certain AMP packets. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the BPF subsystem in Linux operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of Vue RIS software, related to the leakage of information in error messages, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Vue RIS software is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to disclose protected information and cause service interruptions.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...