The vulnerability of the Outbyte PC Repair program for cleaning temporary files and checking security settings is related to an uncontrolled search path element, allowing attackers to increase their privileges.

The vulnerability of Outbyte PC Repair’s file cleaning and security settings checking function is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2022-4559 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, which can allow an attacker to bypass security restrictions. Recommendations: At the moment, there is no information about a...

PT-2022-4117 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings of the Windows Hello biometric authentication feature in the Windows operating system. This could allow an attacker to bypass existing...

PT-2022-4089 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a security feature bypass in Windows Defender, allowing attackers to bypass the Kerberos authentication procedure. This could potentially enable an attacker...

PT-2022-4305 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. It is a security-feature bypass vulnerability that enables attacker...

PT-2022-3605 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Office, which can be exploited to bypass security restrictions. This allows an attacker to affect the system. The...

CVE-2022-1029

The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite...

Samsung mobile 安全漏洞

Samsung mobile is a South Korean cell phone from Samsung. A security vulnerability exists in Samsung mobile SecSettingsIntelligence SMR prior to Jun-2022 Release 1, which arises from an unprotected component vulnerability in DeviceSearchTrampoline that allows local attackers to initiate activity ...

Race Condition in Jenkins

A race condition during Jenkins 2.81 through 2.94 inclusive; 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related...

PT-2022-2651 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. This security-feature bypass vulnerability can affect the system...

PT-2022-3138 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Kerberos network protocol authentication for the isolated software environment AppContainer in Windows operating systems, which is connecte...

Apache Tomcat may be started without proper security settings

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions...

PT-2022-2597

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in security settings, allowing an attacker to bypass security features and potentially disclose protected information. A security-feature bypass...

Fraud on Zelle

Zelle is rife with fraud: Zelle’s immediacy has also made it a favorite of fraudsters. Other types of bank transfers or transactions involving payment cards typically take at least a day to clear. But once crooks scare or trick victims into handing over money via Zelle, they can siphon away...

PT-2022-1674 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Common Log File System Driver, which can be exploited due to errors in security...

PT-2022-1660 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to disclose protected information. It enables attackers to obtain sensitive informati...

PT-2022-1654 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized acces...

PT-2022-1980

Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Description The issue is related to errors in security settings of Microsoft Office and Microsoft 365 Apps for Enterprise packages, which can allow an attacker to bypass security features...

How to Secure Your SaaS Stack with a SaaS Security Posture Management Solution

Whether it’s Office 365, Salesforce, Slack, GitHub or Zoom, all SaaS apps include a host of security features designed to protect the business and its data. The job of ensuring that all the apps have proper security settings and are configured correctly falls on the security team. The challenge...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, including models D3600, D6000, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, DC112A, DGN2200v4, DGND2200Bv4, DM200, EX3700, EX3800, EX6120, EX6130, EX7000, PR2000, R6220, R6230, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R7000, R7100LG, R7500v2, R7900P, R8000P, R8900, R9000, RBK20, RBK40, RBK50, RBR20, RBR40, RBR50, RBS20, RBS40, RBS50, WN3000RPv2, WNDR3400v3, WNR2000v5, WNR2020, WNR3500Lv2, XR450, XR500… are related to errors in security settings. These errors allow attackers to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerabilities of NETGEAR Wi-Fi router software models D3600, D6000, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, DC112A, DGN2200v4, DGND2200Bv4, DM200, EX3700, EX3800, EX6120, EX6130, EX7000, PR2000, R6220, R6230, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R7000, R7100LG,...