The vulnerability of the rsync platform used in OpenStack platforms for cloud computing solutions allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the rsync platform used in OpenStack platforms for cloud computing solutions is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-6689 · Vmware · Vmware Esxi

Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is related to a heap-overflow vulnerability in VMware ESXi. A malicious local actor with restricted privileges within a sandbox process may exploit this issue to achieve a...

PT-2022-6244 · Ami · Ami Megarac

Name of the Vulnerable Software and Affected Versions: AMI MegaRAC affected versions not specified Description: The issue is related to insufficient protection of service data in the implementation of the application programming interface of the AMI MegaRAC firmware controllers for remote...

The vulnerability of the Form Manager component in the Firefox browser allows a hacker to disclose protected information.

The vulnerability of the Form Manager component in the Firefox browser is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Mixed Reality Developer Tools component for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mixed Reality Developer Tools component for Windows operating systems is related to deficiencies in the system’s controlled area segmentation. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Special:UserRights component of the MediaWiki software, which enables the implementation of a hypertext environment, allows a perpetrator to disclose protected information.

The vulnerability of the Special:UserRights component of the MediaWiki software, which is used to implement the hypertext environment, is related to errors in permission handling. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerability of the Microsoft.NET Framework, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft.NET Framework is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise applications relates to security configuration errors, allowing attackers to disclose protected information.

The vulnerability of Microsoft Excel, Microsoft Office, and Microsoft 365 Apps for Enterprise programs is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file...

The vulnerability in the Acrobat.dll executable of PDF file viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 arises from reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Acrobat.dll executable files used by PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data beyond the buffer in memory. Exploitin...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information by using a specially created file...

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted requests...

The vulnerability of HID components in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of HID components in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to gain...

The vulnerability of the Kubernetes cluster management software, related to access control deficiencies, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster management software is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Apache Tomcat application server, related to synchronization errors when using shared resources, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the implementation of the dmarc_dns_lookup function (dmarc.c) of the Exim mail server’s DMARC handler allows a hacker to gain unauthorized access to protected information.

The vulnerability of the implementation of the dmarcdnslookup function dmarc.c, which is part of the DMARC email server handler from Exim, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected informati...

Vulnerability of browser extensions in Google Chrome and Microsoft Edge, allowing attackers to gain unauthorized access to protected information

The vulnerability of Google Chrome and Microsoft Edge browser extensions is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by downloading a specially created extension...

The vulnerability of the Windows operating system’s DHCP client allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s DHCP client is related to the lack of protection for service data. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to protected information...