The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the Windows Defender Firewall component of the Windows operating system allows attackers to compromise the integrity of protected information.

The vulnerability of the Windows Defender Firewall component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information from a remote location...

The vulnerability of the GnuTLS cryptographic library, related to an error in verifying decrypted RSA data, allows a perpetrator to gain access to protected information.

The vulnerability of the GnuTLS cryptographic library is related to an error in the verification of decrypted RSA data. Exploiting this vulnerability could allow an attacker to gain access to protected information by using a secondary cache channel...

The vulnerabilities of Intel and ARM processors stem from the use of speculative execution and memory reading before returning addresses of previous write operations to memory. This allows attackers to exploit these vulnerabilities to disclose protected information.

The vulnerabilities of Intel and ARM processors are related to the use of speculative execution and memory reading before returning addresses of previous write operations to memory. Exploiting these vulnerabilities can allow attackers to disclose sensitive information through specially crafted...

The vulnerability of the VNC Repeater component of the LibVNC library, which allows a hacker to disclose protected information

The vulnerability of the VNC Repeater component in the client library LibVNC is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code or gain access to protected information.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to protected information through a specially crafted malicio...

The vulnerability of the Lazy FPU context switching function in Intel processors allows a hacker to gain access to protected information.

The vulnerability of the Lazy FPU context switching function in Intel processors is related to insufficient protection of data in the FPU registers of the processor. Exploiting this vulnerability can allow an attacker to access protected information...

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system allows attackers to gain access to protected information.

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...

The vulnerability of the IIoT Monitor software, related to errors in the use of cryptography, allows a perpetrator to disclose protected information.

The vulnerability of the IIoT Monitor software is related to errors in the use of cryptography. Exploiting this vulnerability could allow a hacker to disclose protected information...

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain access to protected information.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker to gain access to protected information using the HTTP protocol...

The vulnerability of the WLS component – the Web Services server of Oracle WebLogic Server – allows a perpetrator to gain access to protected information.

The vulnerability of the WLS component—the Web Services server of Oracle WebLogic Server—is related to insufficient access control. Exploiting this vulnerability could allow an attacker operating remotely to gain access to protected information using the HTTP protocol...

The vulnerability of the proc_pid_stack function in Linux kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the procpidstack function in Linux operating systems is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the “Valid Session” component in the Oracle Reports Developer reporting software allows a perpetrator to gain access to protected information.

The vulnerability of the “Valid Session” component in the Oracle Reports Developer software relates to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the administration portal of Cisco Identity Services Engine allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, is related to errors in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the LibKMIP component of the Oracle Solaris operating system, which allows a hacker to gain access to protected information

The vulnerability of the LibKMIP component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the `dic_unserialize` function in the GlusterFS file system allows a hacker to gain access to protected information.

The vulnerability of the dicunserialize function in the GlusterFS file system is related to errors in handling negative key lengths. Exploiting this vulnerability could allow an attacker to gain access to protected information remotely...

The vulnerability of the Oracle Performance Management (Performance Management Plan) component of the Oracle E-Business Suite automation system, which allows a perpetrator to modify protected information

The vulnerability of the Oracle Performance Management component Performance Management Plan within the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify protected information using the HTT...

The vulnerability of the Oracle One-to-One Fulfillment component (OCM Query) within the Oracle E-Business Suite automation system, which allows a perpetrator to modify protected information.

The vulnerability of the Oracle One-to-One Fulfillment OCM Query component of the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify protected information using the HTTP protocol...

The vulnerability of the PowerShell API software interface of the Microsoft Exchange Server mail server allows a hacker to gain access to protected information.

The vulnerability of the PowerShell API of the Microsoft Exchange Server mail server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information within the Calendar application...

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol, related to key management errors, allows a perpetrator to compromise data integrity.

The vulnerability of the ntpd implementation of the Network Time Synchronization Protocol is related to key management errors. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...