Windows Installer Unauthorized Access

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Procedure Call Runtime Windows Code Execution

The vulnerability of the Procedure Call Runtime component in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

Hyper-V Hardware Virtualization Unauthorized Access

The vulnerability of the Hyper-V hardware virtualization technology for Microsoft Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SeaMonkey Data Access

The vulnerability of the SeaMonkey web browser lies in the lack of protection for sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2021-2633

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can allow an attacker to gain unauthorized access to protected information. This can...

PT-2021-2733 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient protection of internal data in the Visual Studio Code editor, which can be exploited to execute arbitrary code. Recommendations: At the momen...

PT-2021-2593 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient protection of sensitive data in the Hyper-V hardware virtualization system of Microsoft Windows, which can allow an attacker to gain unauthorize...

PT-2021-2582 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to gain unauthorized...

PT-2021-2618 · Microsoft · Windows Codecs Library +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: The vulnerability in the Microsoft Windows Codecs Library is related to insufficient protection of internal data. It allows attackers to obtain sensitive informatio...

PT-2021-2732 · Microsoft · Windows Console Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Console Driver affected versions not specified Description: The issue is related to insufficient protection of system data in the Windows Console Driver component, which can be exploited to cause a denial of service. This allows an...

PT-2021-2710 · Microsoft · Windows Media Photo Codec +1

Name of the Vulnerable Software and Affected Versions: Windows Media Photo Codec affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Media Photo Codec component, which can allow an attacker to gain unauthorized access to...

PT-2021-2679 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows DNS service, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2021-2683 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Domain Name System DNS service of Microsoft Windows operating systems. It allows a remote attacker to cause a denial o...

NETGEAR Wi-Fi Router Operational Data Protection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as D6200, D7000, R6020, R6080, R6050, and JR6150, stems from the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...

NETGEAR GS808E Service Data Protection Failure

The vulnerability of NETGEAR GS808E switch microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability could allow an intruder to cause a service failure...

NETGEAR ProSafe Plus JGS516PE DoS

The vulnerability of NETGEAR ProSafe Plus JGS516PE microcontroller-based devices lies in the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Mutt Man-in-the-Middle

The vulnerability of the Mutt mail client is related to insufficient data protection. Exploiting this vulnerability allows a remote attacker to carry out a “man-in-the-middle” attack...

Caught on Camera: Rethinking IoT Security

We all know that we're on camera pretty much constantly -- most coffee shops, convenience stores, and even offices employ security cameras for protection. But what happens when those devices built to keep us safe become unsafe? Hacks are becoming more frequent and attacking personal, private data...

PT-2021-2799

Name of the Vulnerable Software and Affected Versions SonicWall Email Security version 10.0.9.x SonicWall Hosted Email Security affected versions not specified Description The issue is related to insufficient file checking during upload, allowing a remote attacker to gain unauthorized access to...

Are You One of the 533M People Who Got Facebooked?

Neer-do-wells leaked personal data -- including phone numbers -- for some 553 million Facebook users this week. Facebook says the data was collected before 2020 when it changed things to prevent such information from being scraped from profiles. To my mind, this just reinforces the need to remove...