The vulnerability of Skype for Business Server in corporate communication servers lies in the lack of protection for service data, which allows attackers to carry out spoofing attacks.

The vulnerability of Skype for Business Server’s corporate communication servers is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

PT-2022-3042 · Microsoft · Azure Rtos Guix Studio

Name of the Vulnerable Software and Affected Versions: Azure RTOS GUIX Studio affected versions not specified Description: The issue is related to insufficient protection of service data in the Azure Real Time Operating System GUIX Studio development environment. Exploitation of this issue may...

The vulnerability in the implementation of the io-workqueue in the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the io-workqueue implementation of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the scsi_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the scsiioctl function drivers/scsi/scsiioctl.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Kubernetes ArgoCD application deployment automation tool, related to the lack of protection for service data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability in the implementation of the configuration comparison function of the command-line utility cURL allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the configuration comparison function in the cURL command-line utility is related to insufficient protection of service data when working with the IPv6 protocol. Exploiting this vulnerability can allow a remote attacker to establish an incorrect connection, where one...

The vulnerability of the print spooler daemon in Windows operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to the print queue handler is associated with insufficient protection of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows a hacker to gain unauthorized access to information.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information...

The vulnerability of the Convert2RHEL tool, related to insufficient protection of service data, allows a hacker to crack the user’s password.

The vulnerability of the Convert2RHEL tool is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to obtain user passwords using the command line...

The vulnerability of the transaction interface of the PackageKit package manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the transaction interface of the PackageKit package manager is related to insufficient protection of service data. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Accessibility Insights browser extension, related to the lack of data protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Accessibility Insights browser extension is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-3140 · Microsoft · Windows Desired State Configuration +1

Name of the Vulnerable Software and Affected Versions: Windows Desired State Configuration DSC affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Desired State Configuration DSC service. Exploitation of this issue may allow an...

PT-2022-2539 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Cluster Shared Volumes CSV of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2022-2902 · Microsoft · Ms Lync +1

Name of the Vulnerable Software and Affected Versions: Skype for Business Server affected versions not specified Description: The vulnerability is related to a lack of protection for service data in Skype for Business Server, which can allow a remote attacker to gain unauthorized access to...

The vulnerability in the optimization application for Lenovo Thin Installer, related to insufficient protection of service data, allows a malicious actor to trigger a service failure.

The vulnerability of the optimization application for Lenovo Thin Installer is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability in the implementation of Full Screen Mode in Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise the integrity, accessibility, and confidentiality of protected information.

The vulnerability of the Full Screen Mode implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to compromise the integrity, accessibility, and confidentiality of the protected information...

The vulnerability of FortiOS operating systems, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by sending a specially crafted Client Hello message in TLS SNI...

The vulnerability of the embedded software of NETGEAR routers such as EX6100v2, EX6150v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, EX7700, LBR1020, LBR20, RBK352, RBK50, RBR350, RBR50, RBS350 lies in the lack of protection for service data. This allows attackers to disclose the protected information.

The vulnerability of the embedded software of NETGEAR routers such as EX6100v2, EX6150v2, EX6250, EX6400, EX6400v2, EX6410, EX6420, EX7300, EX7300v2, EX7320, EX7700, LBR1020, LBR20, RBK352, RBK50, RBR350, RBR50, and RBS350 lies in the lack of protection for service data. Exploiting this...

The vulnerability of the built-in software of NETGEAR routers such as R6400v2, R6700v3, R7000, R6900P, and R7000P lies in the lack of protection for service data, allowing attackers to exploit this to disclose protected information.

The vulnerability of the built-in software of NETGEAR routers such as R6400v2, R6700v3, R7000, R6900P, and R7000P lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...