The vulnerability of Windows Defender Application Control (WDAC) on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the jscript9legacy.dll library in the Antimalware Scan Interface (AMSI) component of Microsoft Windows operating systems allows a malicious actor to circumvent security restrictions.

The vulnerability of the jscript9legacy.dll library in the Antimalware Scan Interface AMSI component of Microsoft Windows operating systems is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

PT-2024-7177 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. Recommendations: At t...

The vulnerability of Microsoft Publisher software lies in its data protection mechanisms being breached, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Publisher software is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

PT-2024-6472 · Veeam · Veeam Reporter Service +1

Name of the Vulnerable Software and Affected Versions: Veeam Reporter Service affected versions not specified Description: A vulnerability exists in Veeam Reporter Service that allows an attacker to access the NTLM hash of the service account. This attack requires user interaction and data...

The vulnerability of the SCADA system MasterSCADA, related to deficiencies in data protection, allows a intruder to gain access to the project’s web server.

The vulnerability of the SCADA system MasterSCADA is related to deficiencies in data protection. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project’s web server by reverting the password hash value...

The vulnerability of the RocketMQ messaging platform, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the RocketMQ messaging platform is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to insufficient protection of operational data, allows unauthorized access by attackers to the protected information.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to a flaw in the data protection mechanism, allows attackers to enhance their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

PT-2024-3723 · Oracle +1 · Oracle Graalvm Enterprise Edition +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient protection of internal data in the Compiler component of Oracle GraalVM for JDK a...

The vulnerability in the archive extraction function of the WinRAR file archiver allows a hacker to bypass the Mark-Of-The-Web protection mechanism and potentially execute arbitrary code.

The vulnerability of the archive extraction function of the WinRAR file compressor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass the Mark-Of-The-Web protection mechanism and potentially execute arbitrary code...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security stem from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

PT-2024-1016 · Microsoft · Windows Message Queuing Client +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing Client MSMQC affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Message Queuing Client MSMQC, which can allow a remote attacker to gain...

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain access to and read data.

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely,...

The vulnerability of the Joomla! content management system lies in the lack of protection for administrative data, allowing attackers to access confidential information.

The vulnerability of the Joomla! content management system is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Apache Airflow network software lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Airflow network software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2023-8354 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to a lack of protection for sensitive user data, which may allow an app to access it. An attacker could exploit this to execute arbitrary commands. The issue was addressed with...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of operational data, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in a flaw related to the processing of user-controlled authentication keys. This flaw allows attackers to gain unauthorized access to protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is associated with an error in the processing of authentication keys controlled by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

PT-2023-8483 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a lack of protection for service data in the printing component of the macOS operating system. This could allow an attacker to disclose protected information. An app may be able ...