The vulnerability of the Event Tracing service in Microsoft Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Event Tracing service in Microsoft Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system-based Cryptographic Services is related to the exposure of information. Exploiting this vulnerability can allow an attacker to disclose the protected information...

PT-2023-1264 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a security feature bypass vulnerability in Microsoft Edge, which is associated with errors in security settings. An attacker could exploit this...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerability of the SAP Disclosure Management tool in terms of authentication errors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Disclosure Management reporting tool is related to authentication errors. Exploiting this vulnerability can allow unauthorized actors, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the WordPress Metaslider plugin stems from the lack of measures taken to protect the structure of the web page. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of the WordPress Metaslider plugin exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

PT-2023-1158 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, which could allow an attacker to reveal protected information. This may enable the attacker to...

The vulnerability of the User Portal component of the SFOS operating system’s network interface layer, specifically the Sophos Firewall (previously called Sophos XG Firewall), allows a intruder to gain unauthorized access to protected information.

The vulnerability of the User Portal component of the SFOS operating system’s Sophos Firewall formerly Sophos XG Firewall is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access...

The vulnerability of the SFOS operating system’s network interface, which is part of the Sophos Firewall (formerly known as Sophos XG Firewall), allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SFOS operating system’s network interface, which is part of the Sophos Firewall formerly known as Sophos XG Firewall, relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the insufficient verification of incoming requests, allowing a hacker to gain unauthorized access to protected information.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to insufficient validation of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the WapService service in the Android operating system of LG devices allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the WapService service on LG devices’ Android operating systems is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the AVEVA Edge SCADA system, related to insufficient protection of operational data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AVEVA Edge SCADA system is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the sec_log.log file (/data/log/sec_log.log) on Android mobile devices from Samsung devices allows a intruder to gain unauthorized access to protected information.

The vulnerability of the seclog.log file /data/log/seclog.log on Android mobile devices from Samsung is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Boa HTTP server’s files backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the Boa HTTP server’s files backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js are related to configuration errors. Exploiting these vulnerabilities can allow an attacker operating remotely to gain unauthorized access to protected...

ROS-20221222-01

A vulnerability in the audinsendopen function of the xrdp server is related to the possibility of a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to a remote machine Vulnerability in devredirprocclientdevlistannouncereq function ...

The vulnerability of the Windows Graphics Component, which allows a hacker to disclose protected information on Windows operating systems

The vulnerability of the Windows Graphics Component relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information through a special...

The vulnerability of the protection mechanism for detecting and responding to security threats at FortiEDR endpoints lies in the use of a strictly encrypted cryptographic key. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of the security tool for detecting and responding to security threats at end points in FortiEDR is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected informati...

The vulnerability of the network traffic analysis, network detection, and response mechanism of the Cortex XDR Agent stems from deficiencies in access control. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Cortex XDR Agent, which is responsible for network traffic analysis, network detection, and response, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Siemens PADS Standard/Plus Viewer application, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Siemens PADS Standard/Plus Viewer application relates to reading data beyond the buffer in memory during the processing of PCB file formats. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...