Dell PowerProtect Data Domain Access Control Error Vulnerability

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. An access control error vulnerability exists in Dell PowerProtect Data Domain, which stems from the inclusion of improper access controls. A...

PT-2023-7921 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM Qradar SIEM version 7.5 Description: The issue is related to the misidentification of data, which could allow a privileged user to obtain sensitive domain information. This is due to insufficient protection of service data. A remote...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to insufficient protection of service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by opening a specially create...

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain access to and read data.

The vulnerability of the Supplier Management sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite enterprise automation system, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely,...

Dell PowerProtect Data Domain 操作系统命令注入漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. A command execution vulnerability exists in Dell PowerProtect Data Domain that stems from a failure to properly filter construct command...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Spoofing Access to system data Increased user privilege...

PT-2023-8820 · Apache · Apache Linkis

Name of the Vulnerable Software and Affected Versions: Apache Linkis versions =1.4.0 Description: The issue is related to insufficient protection of registration data in Apache Linkis, which may allow a remote attacker to gain unauthorized access to protected information. Specifically, when using...

The vulnerability of the WindowServer component in macOS operating systems allows a perpetrator to gain unauthorized access to the microphone.

The vulnerability of the WindowServer component in macOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to the microphone...

CVE-2023-36004

Windows DPAPI Data Protection Application Programming Interface Spoofing Vulnerability...

CVE-2023-36004

Windows DPAPI Data Protection Application Programming Interface Spoofing Vulnerability...

Spoofing

Windows DPAPI Data Protection Application Programming Interface Spoofing Vulnerability...

CVE-2023-36004 Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

...

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

...

CVE-2023-42932

The CVE-2023-42932 entry describes a logic issue that could allow an app to access protected user data. Affected platforms include macOS Monterey 12.7.2, macOS Ventura 13.6.3, and macOS Sonoma 14.2, with patches released in those macOS updates. The root cause is characterized as a logic/validatio...

PT-2023-7776 · Microsoft · Windows Dpapi +1

Name of the Vulnerable Software and Affected Versions: Windows DPAPI affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the Windows DPAPI component. This can allow a remote attacker to conduct spoofing attacks...

PT-2023-8111

Name of the Vulnerable Software and Affected Versions Azure Machine Learning Compute Instance for SDK Users affected versions not specified Description The issue is related to a lack of protection for service data in Azure Machine Learning, which can allow an attacker to gain unauthorized access ...

Microsoft Windows DPAPI Security Vulnerability

Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows DPAPI Data Protection Application Programming Interface. An attacker could exploit this vulnerability to perform spoofing attacks...

PT-2023-7680 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The vulnerability is related to insufficient protection of service data in the Windows DHCP Server Service, which can be exploited by a remote attacker to gain...

PT-2023-8109 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows operating system's DHCP server service. This can be exploited by a remote attacker to disclose protected...