PT-2023-3125 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows kernel, allowing an attacker to obtain sensitive information. This could affect the system's security. The...

PT-2023-3280 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 9.2.0 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This can be exploited by a remote attacker to disclose protected information. The...

PT-2023-3297 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Edge, which could allow a remote attacker to gain unauthorized access to protected...

The vulnerability of D-Link DIR-825 router’s microprogramming software lies in the lack of protection for service data, allowing attackers to disclose the protected information.

The vulnerability of D-Link DIR-825 router’s microprogramming software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information by requesting the routerinfo.xml file...

The vulnerability of Firefox and Firefox ESR browsers, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through the import function...

PT-2023-3556 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to insufficient protection of service data, which could allow a remote attacker to obtain system information using a specially crafted query, potentially aiding ...

PT-2023-5816 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.4 tvOS versions prior to 16.5 iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 Description: A privacy issue was addressed with improved handling of temporary files. This...

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel, related to the lack of protection for service data, allows attackers to exploit the protected information.

The vulnerability of the Microsoft Malware Protection Engine’s antivirus kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow a hacker to disclose the protected information...

Online Exam System SQL注入漏洞

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameters columns, data of /classes/Master.php?f=deleteservice/kelasdosen/data for external input SQL statements. An attacker can...

The vulnerability of Visual Studio Code’s source editor, related to insufficient protection of service data, allows a hacker to execute arbitrary code.

The vulnerability of Visual Studio Code’s source editor is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Windows Bluetooth Driver of the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Bluetooth Driver in the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, acting remotely, to gain unauthorized access to protected information...

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the lack of protection for service data. This allows attackers to disclose sensitive information and completely compromise the device.

The vulnerability of NETGEAR RAX30 router microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to disclose sensitive information and completely compromise the device by sending specially crafted SOAP requests...

The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Windows iSCSI Target service allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows iSCSI Target service for Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2023-2714 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient protection of service data in Visual Studio Code. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations...

PT-2023-2692 · Microsoft · Windows Ntlm Security Support Provider +1

Name of the Vulnerable Software and Affected Versions: Windows NTLM Security Support Provider affected versions not specified Description: The issue is related to the implementation of the NTLM Security Support Provider protocol in the Windows operating system, which lacks protection for service...

PT-2023-2721 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to an information disclosure vulnerability in Microsoft SharePoint Server. This vulnerability is associated with a lack of protection for service...

PT-2023-2723 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is...

PT-2023-2701 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The vulnerability is related to insufficient protection of service data in the Windows Bluetooth Driver, which can allow a remote attacker to gain unauthorized access to...

The vulnerability of the Fortinet FortiNAC network access control mechanism lies in the lack of protection for service data, which allows attackers to exploit this weakness to disclose protected information.

The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...