The vulnerability of the IsUNCPath method in Microsoft Exchange Server servers allows attackers to perform spoofing attacks.

The vulnerability of the IsUNCPath method in Microsoft Exchange Server’s mail server is related to insufficient protection of service data during NTLM authentication. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the mDNSResponder component in operating systems such as watchOS, iOS, iPadOS, and tvOS allows a hacker to track a device based on its MAC address via Wi-Fi.

The vulnerability of the mDNSResponder component in operating systems such as watchOS, iOS, iPadOS, and tvOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to track a device based on its MAC address via Wi-Fi...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to the lack of protection for service data, allowing a perpetrator to disclose protected information.

The vulnerability of Microsoft Edge based on Chromium is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Web Listener component of the Oracle HTTP Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Listener component of the Oracle HTTP Server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the DirSync synchronization mechanism in the Samba networking communication software package allows a intruder to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the DirSync synchronization mechanism in the Samba networking communication software package is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information and...

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information using the “file copy” command...

PT-2023-6525 · Hewlett Packard · Hp Print/Scan Doctor For Windows

Name of the Vulnerable Software and Affected Versions: HP Print and Scan Doctor for Windows affected versions not specified Description: The issue is related to insufficient protection of service data, which may allow an attacker to escalate their privileges. HP is releasing software updates to...

PT-2023-6372 · Advantech · Advantech Webaccess

Name of the Vulnerable Software and Affected Versions: Advantech WebAccess version 9.1.3 Description: The issue is related to an exposure of sensitive information to an unauthorized actor, which could lead to the leakage of user credentials. This is due to a lack of protection for service data...

The vulnerability of the Safari browser in operating systems such as watchOS, iPadOS, macOS, and iOS allows attackers to disclose sensitive information that is protected by these systems.

The vulnerability of the Safari browser in operating systems such as watchOS, iPadOS, macOS, and iOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

PT-2023-5976 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Dynamics 365, which can allow a remote attacker to gain unauthorized access to...

PT-2023-6223 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: Statutory Reporting application affected versions not specified SAP S/4HANA affected versions not specified Description: The issue concerns a vulnerable file storage location in the Statutory Reporting application, potentially allowing a...

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Maps component in operating systems such as iPadOS, tvOS, iOS, watchOS, and macOS is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the onHostEmulationData() function in Android operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the onHostEmulationData function in Android operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to insufficient protection of service-related data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the IBM AIX operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to confidential information.

The vulnerability of the IBM AIX operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

The vulnerability of the web-server of the programmable logical controller ioLogik lies in the lack of protection for service data, allowing a intruder to gain unauthorized access to the protected information.

The vulnerability of the web-server of the programmable logical controller ioLogik is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-6970 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient protection of service data during NTLM authentication, specifically with the IsUNCPath method. This can allow a remote attacker to...

The vulnerability of the Windows Wireless Wide Area Network Service (WwanSvc) allows a hacker to compromise the protected information.

The vulnerability of the Windows Wireless Wide Area Network Service WwanSvc operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2023-9213 · Qnap · Qnap Ts-X41

Name of the Vulnerable Software and Affected Versions: QNAP TS-X41 affected versions not specified Description: The issue is related to a lack of protection for service data in the QNAP TS-X41 network storage. It allows a remote attacker to identify an existing user in the system. Recommendations...

The vulnerability of AMD’s microprogramming software lies in the lack of protection for service data, which allows attackers to access the memory contents of other users’ processes.

The vulnerability of AMD’s microprogrammed software lies in the lack of protection for system data. Exploiting this vulnerability can allow attackers to access the memory contents of other users’ processes...