PT-2020-1658 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...

PT-2020-1677

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. The...

PT-2020-1632 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore scripting engine. This could allow a remote attacker to execute arbitrary code in the contex...

PT-2020-1602

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory within the Windows Function Discovery service of Windows operating systems. It allows an attacker to potentially elevate their...

ajaxArchiveFiles.php Command Execution

The vulnerability of the ajaxArchiveFiles.php component, a utility for managing the configuration of rConfig network devices, is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by sending...

libzypp Unauthenticated Information Disclosure

The vulnerability of the libzypp library in SUSE CaaS Platform and SUSE Linux Enterprise Server software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information...

PT-2020-1675

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server. This vulnerability could allow a remote attacker to gain elevated privileges,...

Siemens Industrial Products SNMP (Update F)

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

PT-2020-1695

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory by the tapisrv.dll library in the Windows operating system. Exploitation of this issue may allow an attacker to elevate their...

RUSTSEC-2020-0169 multi_mut is Unmaintained

Last release was about 6 years ago. There is an outstanding soundness issue. The maintainer has not responded for two years to the existing soundness issue. Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned...

MySQL Server DoS

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

MySQL Database Management System DoS

The vulnerability of the C API component of the MySQL Database Management System client is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol network protocol...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the MySQL Database Management System is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Server MySQL DoS

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Enterprise Config Management Unauthorized Access

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, obtain unauthorized access to protected information, ...

MySQL Server DoS

The vulnerability of the MySQL Server component relates to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Outside In Filters Component DoS

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the HTTP protocol...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Enterprise Config Management Privilege Escalation

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information...

Enterprise Manager Base Platform Data Modification Privilege Escalation

The vulnerability of the Repository component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability may allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information, or cause a partial...