PT-2021-6041 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the disclosure of protected information in the Windows GDI interface. It allows an attacker to gain unauthorized access to sensitive information. Recommendations: At...

PT-2021-6943 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to a memory information disclosure in the Windows Kernel, which could allow a remote attacker to gain unauthorized access to protected information. This could...

The vulnerability of Intel microprogramming software, related to the disclosure of information through incompatibility, allows attackers to disclose protected information.

The vulnerability of Intel microprogramming software is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the boundaries of the memory buffer. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information through a specially crafted PDF file...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the eBPF subsystem in the Linux operating system is related to a type conversion error. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

The vulnerability of the Dovecot mail server, related to errors in the encapsulation fields kid and azp in JWT tokens, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Dovecot mail server is related to errors in the encapsulation of fields “kid” and “azp” in JWT tokens. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the ContentModelChange function in the software for implementing a hypertext environment like MediaWiki allows attackers to compromise the integrity of the protected information.

The vulnerability of the ContentModelChange function in the MediaWiki software, which is used to implement the hypertext environment, relates to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...

The vulnerability of the libxml2 library in operating systems such as iOS, iPadOS, macOS, tvOS, watchOS, the multimedia player iTunes, and the iCloud service allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libxml2 library in iOS, iPadOS, macOS, tvOS, watchOS, the multimedia player iTunes, and the iCloud service arises due to a buffer overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the BPF subsystem in Linux operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in the authentication process, allows a violator to disclose protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

The vulnerability of Vue RIS software, related to the leakage of information in error messages, allows a intruder to gain unauthorized access to protected information.

The vulnerability of Vue RIS software is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to disclose protected information and cause service interruptions.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...

The vulnerability of NFS servers in Microsoft Windows systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of NFS servers on Microsoft Windows operating systems is related to security flaws in the handling of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the Windows operating system’s Bind Filter Driver allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Bind Filter Driver relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar lies in the improper verification of the cryptographic signature. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the cloud-based messaging and streaming communication platform Apache Pulsar is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel system call implementation (/proc/pid/syscall) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the system call implementation /proc/pid/syscall in Linux kernels is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface for managing Cisco AsyncOS operating systems is related to deficiencies in the security of operational data in the source code. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information throug...