Oracle VM VirtualBox Kernel Security Bypass

The vulnerability of the Oracle VM VirtualBox virtualization software’s kernel is related to deficiencies in its data protection mechanisms. Exploiting this vulnerability could allow attackers to bypass existing security measures...

CVE-2025-20305

Cisco ISE (web-based management interface) contains an information-disclosure vulnerability where certain files lack proper data protection, enabling an authenticated, read-only administrator to view passwords normally hidden to that role. Impact is limited to confidentiality (viewing sensitive c...

Veeam Service Provider Console NTLM Authentication Bypass

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Consoles is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures an...

MasterSCADA Data Protection Access

The vulnerability of the SCADA system MasterSCADA is related to deficiencies in data protection. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the project configuration file by rewriting the password hash value...

ABAP SAP NetWeaver Operational Information Disclosure

The vulnerabilities of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server are related to insufficient protection of operational data. Exploiting these vulnerabilities can allow attackers to disclose sensitive information...

Microsoft Bing Search iOS Spoofing

The vulnerability of Microsoft Bing Search’s search engine on the iOS operating system is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker to perform spear-phishing attacks remotely...

Microsoft SharePoint Server Unauthorized Access

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to deficiencies in data protection. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Network Address Translation DoS

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to security flaws in service data protection. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

File Store Service Privilege Escalation

The vulnerability of the File Store Service of the Service Fabric application is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to enhance their privileges by modifying the configuration file and connecting to SMB or SCP ports...