The vulnerability of the automatic decryption process of Cisco Umbrella Secure Web Gateway (SWG) allows attackers to circumvent existing security restrictions.

The vulnerability of the automatic decryption process of the Cisco Umbrella Secure Web Gateway SWG is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the Jenkins HashiCorp Vault’s software for storing API keys, tokens, and passwords arises from a flaw in its data protection mechanism. This flaw allows attackers to disclose the protected information.

The vulnerability of the Jenkins HashiCorp Vault’s software for storing API keys, tokens, and passwords is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to expose the protected information...

The vulnerability of the FUDforum internet forum, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the FUDforum internet forum is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject arbitrary code during the administrator’s email reading process. This code can then...

PUB-A-193438173

In TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the CSC service in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CSC service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is a functional application from Proofpoint USA that provides email protection. A security bypass vulnerability exists in Proofpoint Enterprise Protection versions prior to 8.16.4, which can be exploited by an attacker to send an e-mail with a malicious attachment...

The vulnerability of the Microsoft Quantum Development Kit for Visual Studio Code, related to the lack of data protection for service data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Quantum Development Kit for Visual Studio Code, which is used for developing and optimizing quantum computing applications, relates to the lack of protection for application data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

grub2: cutmem command allows privileged user to remove memory regions when Secure Boot is enabled

A flaw was found in grub2. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest threat from this...

PT-2021-20341 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security versions 2.0.0 through 2.7.7 Stormshield Network Security versions 2.8.0 through 2.16.0 Stormshield Network Security versions 3.0.0 through 3.7.16 Stormshield Network Security versions 3.8.0 through 3.11.4...

The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers, related to the lack of protection for operational data, allows attackers to carry out spoofing attacks.

The vulnerability of Skype for Business Server Microsoft Lync Server corporate communication servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

PT-2021-1924 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Local Print Spooler Service. This allows a remote attacker to execute arbitrary code on the system...

The vulnerability of the software development package for Azure SDK for C lies in a flaw related to data protection mechanisms. This flaw allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for C development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Azure SDK for Java development software package lies in a data protection mechanism flaw, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for Java development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV, related to the lack of protection for operational data, allows a perpetrator to gain access to protected information.

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of the MESSAGING and SAP_XIAF components of the software for integrating corporate applications in SAP NetWeaver Process Integration allows a hacker to disclose protected information.

The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the EHCI controller in VMware ESXi, VMware Workstation, and VMware Fusion allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the EHCI controller in VMware ESXi, VMware Workstation, and VMware Fusion lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Microsoft Visual Studio Code Live Share Extension, related to the lack of data protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Visual Studio Code Live Share Extension relates to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by intercepting tokens from the client to...

The vulnerability of the toolsadmin.php component of the D-Link DIR-865L router’s microprogramming software allows a hacker to gain unauthorized access to protected data.

The vulnerability of the toolsadmin.php component in the D-Link DIR-865L router’s microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

The vulnerability of the SCADA system MasterSCADA, related to deficiencies in password protection mechanisms, allows attackers to gain access to the project.

The vulnerability of the SCADA system MasterSCADA is related to deficiencies in the password protection mechanism of the project file. Exploiting this vulnerability can allow an intruder to gain access to the project by resetting the password hash value...