The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to insufficient protection of operational data, allows unauthorized access by attackers to the protected information.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to a flaw in the data protection mechanism, allows attackers to enhance their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

PT-2024-3723 · Oracle +1 · Oracle Graalvm Enterprise Edition +2

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK versions 17.0.10, 21.0.2, 22 Oracle GraalVM Enterprise Edition versions 20.3.13, 21.3.9 Description: The issue is related to insufficient protection of internal data in the Compiler component of Oracle GraalVM for JDK a...

The vulnerability in the archive extraction function of the WinRAR file archiver allows a hacker to bypass the Mark-Of-The-Web protection mechanism and potentially execute arbitrary code.

The vulnerability of the archive extraction function of the WinRAR file compressor is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass the Mark-Of-The-Web protection mechanism and potentially execute arbitrary code...

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security stem from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerabilities of event monitoring platforms, threat detection systems, and security analytics tools from IBM QRadar Suite and IBM Cloud Pak for Security are related to insufficient protection of registration data. Exploiting these vulnerabilities can allow attackers to access confidential...

PT-2024-1016 · Microsoft · Windows Message Queuing Client +1

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing Client MSMQC affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Message Queuing Client MSMQC, which can allow a remote attacker to gain...

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain access to and read data.

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely,...

The vulnerability of the Joomla! content management system lies in the lack of protection for administrative data, allowing attackers to access confidential information.

The vulnerability of the Joomla! content management system is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Apache Airflow network software lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Airflow network software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2023-8354 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to a lack of protection for sensitive user data, which may allow an app to access it. An attacker could exploit this to execute arbitrary commands. The issue was addressed with...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of operational data, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in a flaw related to the processing of user-controlled authentication keys. This flaw allows attackers to gain unauthorized access to protected information.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software is associated with an error in the processing of authentication keys controlled by users. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

PT-2023-8483 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a lack of protection for service data in the printing component of the macOS operating system. This could allow an attacker to disclose protected information. An app may be able ...

The vulnerability of the Cryptographic Services in the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Cryptographic Services in the Windows operating system is related to the lack of protection for service-related data. Exploiting this vulnerability could allow a perpetrator to disclose the protected information...

The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, allows a perpetrator to disclose protected information.

The vulnerability of the Smart Card Resource Management Server, a server for managing smart card resources on the Windows operating system, is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the PostScript Printer Driver (Pscript) and PCL6 Class Printer operating systems for Windows allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

PT-2023-2297 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows Network File System NFS affected versions not specified Description: The issue is related to insufficient protection of service data in the Network File System NFS of Windows operating systems. It allows a remote attacker to gain...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers, such as Modicon M340 and Modicon Quantum/Premium, arises from insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in Schneider Electric Modicon M340 and Modicon Quantum/Premium programmable logic controllers is related to insufficient protection of operational data. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to...

PT-2022-6244 · Ami · Ami Megarac

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC affected versions not specified Description: The issue is related to insufficient protection of service data in the implementation of the application programming interface of the AMI MegaRAC firmware controllers for remote...

PT-2022-5494 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows GDI+ interface, which can allow an attacker to gain unauthorized access to protected information using a...