The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient protection of registration data. This allows attackers to access the driver logs.

The vulnerability of the RtsPer.sys and RtsUer.sys drivers of Realtek SD card readers is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to access the driver logs...

The vulnerability of the microprogrammed software of industrial routers SCALANCE M-800, related to insufficient protection of registration data, allows a hacker to replace other users’ 2FA tokens and expose the protected information.

The vulnerability of the microprogrammed software in industrial routers SCALANCE M-800 is related to insufficient protection for registration data. Exploiting this vulnerability could allow a hacker to replace other users’ 2FA tokens and expose the protected information...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to the domain controller’s account information.

The vulnerability of the 1C-Bitrix website content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to the account information of the domain controller...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to exploit SMTP settings and gain access to SMTP server authentication data.

The vulnerability of the 1C-Bitrix website content management system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to manipulate SMTP settings and gain access to SMTP server authentication data...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to authentication data from the Microsoft Exchange Server server.

The vulnerability of the 1C-Bitrix website content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to authentication data from the Microsoft Exchange Server server...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to authentication data from the SMTP server.

The vulnerability of the 1C-Bitrix website content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to gain access to authentication data from the SMTP server...

The vulnerability of the 1C-Bitrix website content management system, related to insufficient protection of registration data, allows a hacker to gain access to authentication data from the proxy server.

The vulnerability of the 1C-Bitrix website content management system CMS is related to insufficient protection of registration data, allowing attackers to gain access to authentication data from the proxy server...

The vulnerability of the EC2 Cloud Profile module in the Continuous Integration and Delivery application delivery system of JetBrains TeamCity allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the EC2 Cloud Profile module in the Continuous Integration and Delivery application delivery system CI/CD of JetBrains TeamCity is related to insufficient protection for registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain...

The vulnerability of the JetBrains YouTrack project management and task management software, related to insufficient protection of registration data, allows a hacker to gain unauthorized access to the protected information.

The vulnerability of the JetBrains YouTrack project and task management software is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the implementation of the OAuth2 protocol for managing databases in pgAdmin 4 allows a perpetrator to increase their privileges.

The vulnerability of the OAuth2 protocol implementation in the pgAdmin 4 database management tool is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

PT-2024-6626 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.44799 Description: The issue is related to insufficient protection of registration data in JetBrains YouTrack, allowing a remote attacker to gain unauthorized access to protected information. The...

The vulnerability of the snmp_facts module in the Ansible configuration management system arises from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the snmpfacts module in the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.

The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.

The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the RabbitMQ message broker, related to insufficient protection of registration data, allows a hacker to access confidential information.

The vulnerability of the RabbitMQ messaging broker is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.

The vulnerability of Zoom’s video conferencing software relates to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

The vulnerability of the AssumeRoleWithWebIdentity request of the Security Token Service (AWS STS) – a single API for interacting with object storage services and local files in Apache Arrow Rust Object Store – allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the AssumeRoleWithWebIdentity request of the Security Token Service AWS STS – a single API for interacting with object storage services and local files – is related to insufficient protection of registration data. Exploiting this vulnerability allows an attacker to bypass...

The vulnerability of the IBM i operating system and the IBM Rational Development Studio for i application suite lies in the insufficient protection of registration data, allowing a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the IBM i operating system and the IBM Rational Development Studio for i application suite is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code with administrator privileges...

The vulnerability of the OpenAPI audit tool for detecting and tracking network activities, Nozomi Guardian, and the Nozomi Central Management Console (CMC), a centralized security management tool, allows attackers to gain access to protected information.

The vulnerability of the OpenAPI-based detection and monitoring tool for network activities, Nozomi Guardian, as well as the Nozomi Central Management Console CMC, relates to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access t...

The vulnerability of the Access Token Handler component of the JetBrains YouTrack software suite for managing projects and tasks allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Access Token Handler component of the JetBrains YouTrack software for managing projects and tasks is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...