The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite, which allows a hacker to disclose protected information

The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be...

The vulnerability of the Workforce Management component of the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Workforce Management component of the Oracle E-Business Suite automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the OLE Automation technology in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OLE Automation technology in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the Netlogon service in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Netlogon service in Windows operating systems relates to access to a channel from a non-endpoint location. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

PT-2023-3626 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.12 Description: The issue is related to insufficient input validation in the Workforce Management component of Oracle E-Business Suite, allowing a remote attacker to gain unauthorized acces...

The vulnerability in the implementation of the TLS protocol in the Quarkus Java framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TLS protocol implementation in the Quarkus Java framework is related to the insufficient encryption security when using the quarkus.http.ssl.protocols configuration. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems relates to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the TrustZone subsystem’s networking (netdev) component in Qualcomm embedded operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the TrustZone subsystem for networking functions in Qualcomm embedded systems’ operating systems lies in the insufficient protection of sensitive data during the analysis of peripheral channels. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

PT-2023-3827 · Microsoft · Windows Postscript Printer Driver +2

Name of the Vulnerable Software and Affected Versions: Windows PostScript Printer Driver Pscript and PCL6 Class Printer affected versions not specified Description: The issue is related to insufficient protection of system data in Windows operating systems, specifically affecting PostScript Print...

PT-2023-3844 · Microsoft · Windows Failover Cluster +1

Name of the Vulnerable Software and Affected Versions: Windows Failover Cluster affected versions not specified Description: The issue is related to information disclosure in the Failover Cluster component of Windows operating systems. It allows a remote attacker to gain unauthorized access to...

The vulnerability of Zoom video conferencing software, related to the disclosure of information in erroneous data fields, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Zoom video conferencing software is related to the exposure of information in the erroneous data area. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the cURL command-line utility, related to uncontrolled resource consumption, allows a hacker to disclose protected information.

The vulnerability of the cURL command-line utility is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to disclose protected information.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of motion controllers and motion control systems like SIMOTION allows a intruder to disclose the protected information.

The vulnerability of SIMOTION motion controllers and motion control systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Moxa TN-5900 series router microprogramming software, related to inconsistencies in responses to incoming requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of Moxa TN-5900 series router microprogramming software is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability in the cedrus_remove() function within the drivers/staging/media/sunxi/cedrus/cedrus.c driver of the Allwinner sunXi Linux operating system, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in cedrusremove within the drivers/staging/media/sunxi/cedrus/cedrus.c driver of the Allwinner sunXi Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the access control service for remote catalogs and the authentication mechanism sssd, related to the transmission of confidential information to unauthorized entities, allows attackers to disclose the protected information.

The vulnerability of the access control service for remote catalogs and the authentication mechanism of sssd is related to the disclosure of information when an unauthorized user is brought back to the sssd’s home directory, allowing access to the file system. Exploiting this vulnerability can...

The vulnerability of the Hotspot component in the Java SE software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Java SE software platform’s hotspot component is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of microprogrammed software for power measuring instruments and energy counters from Schneider Electric’s PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, and PowerLogic ION8800 lies in the transmission of data in an open manner, allowing attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed software for power measurement instruments and energy counters from Schneider Electric’s PowerLogic ION9000, PowerLogic ION7400, PowerLogic PM8000, PowerLogic ION8650, and PowerLogic ION8800 lies in the transmission of data in an open manner. Exploiting this...

PT-2023-7499 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Edge, allowing a remote attacker to gain unauthorized access to protected information. Recommendations: ...