The vulnerability of the components of Oracle Retail Customer Management and Segmentation Foundation’s software for internal operations allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Internal Operations components of Oracle Retail Customer Management and Segmentation Foundation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause servi...

The vulnerability of the Dialog Box component of the application’s technical maintenance, repair, and major equipment overhauls allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over the data.

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system, which allows a perpetrator to gain unauthorized access to protected information or to read, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or delet...

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over that information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

The vulnerability of the VMware SD-WAN Orchestrator management platform, related to the failure to implement security measures for SQL query structures, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Docker application for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Docker application for Windows operating systems relates to the disclosure of information. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

The vulnerability in the Google Chrome web interface allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s web interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface of Mozilla Firefox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface in Mozilla Firefox’s browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Mozilla Firefox’s WebExtensions module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebExtensions module in the Mozilla Firefox browser is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2021-1829 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system, specifically Windows GDI+, and is associated with shortcomings in security mechanisms. It may allow a remote attacker to...

PT-2021-1543 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows modem.sys Description: The issue exists due to insufficient input validation in the modem.sys component of the Windows operating system. This can allow an attacker to obtain unauthorized access to protected information. The...

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. This allows a perpetrator to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the KVM virtualization subsystem in the Linux operating system, related to the disclosure of information that allows a hacker to access protected data.

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the X-server fly-dm, related to the bypassing of authentication due to a fundamental error, allows attackers to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the X-server fly-dm involves bypassing authentication due to a fundamental flaw. Exploiting this vulnerability allows an attacker who operates remotely to gain access to protected information, compromise its integrity, and cause service failures...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of Microsoft Edge browser for Android, related to insufficient validation of input data, allows attackers to gain access to protected information.

The vulnerability of Microsoft Edge browser for Android is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the authentication library for exchanging identification data according to the SAML2 standard, related to incorrect verification of the cryptographic signature of the data, allows a perpetrator to bypass the signature verification and gain access to protected information.

The vulnerability of the authentication library for exchanging identification data according to the SAML2 standard, implemented with PySAML2, is related to incorrect verification of the cryptographic signature of the data. Exploiting this vulnerability could allow a malicious actor to bypass the...