The vulnerability of the Linux operating system’s kernel system call implementation (/proc/pid/syscall) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the system call implementation /proc/pid/syscall in Linux kernels is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface for managing Cisco AsyncOS operating systems is related to deficiencies in the security of operational data in the source code. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information throug...

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Foundation framework in Mac OS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Foundation framework in Mac OS operating systems is related to the incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Mac OS operating systems, related to deficiencies in data protection for system data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Mac OS operating systems is related to deficiencies in data protection. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to protected information...

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

Information Disclosure

jetty-servlets is vulnerable to information disclosure. Lack of proper handling of requests to the ConcatServlet with a doubly encoded path allows an attacker to access protected resources within the WEB-INF directory. For example, sending /concat?/%2557EB-INF/web.xml can retrieve the web.xml fil...

The vulnerability of the Apache Derby database management system, related to resource management errors, allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Apache Derby database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

The vulnerability of the Apache Derby database management system lies in the insufficient validation of input data, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the Apache Derby database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the lack of protection for operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the leakage of information in error messages, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to the leakage of information in error messages. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

SUSE: Security Advisory (SUSE-SU-2021:1912-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of VMware Workspace One’s software products stems from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of VMware Workspace One’s software products exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the IBM Security Verify Access access control system, related to the insecure storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the IBM Security Verify Access system is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Design/Logic Flaw

The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions WindowViewer if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location...

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...

CVE-2021-28169

For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to /concat?/%2557EB-INF/web.xml can retrieve the web.xml file. This can reveal...