PT-2022-6280 · Dell · Dell Geodrive

Name of the Vulnerable Software and Affected Versions: Dell GeoDrive versions 2.1 through 2.2 Description: The issue is related to the lack of protection for service data in the graphical interface of the local file system. This could allow an attacker to disclose protected information. An...

PT-2022-6461 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to the lack of protection for service data in the ntpd daemon microcode of the ESR-20 service router. This could allow a remote attacker to gain preliminary information...

The vulnerability of the Crow web service framework relates to the lack of protection for service-related data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Crow web service creation framework is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to a device.

The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

The vulnerability of Intel microprogramming software relates to insufficient protection of service data through the use of an alternative channel, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of Intel microprogramming software is related to insufficient protection of service data through the use of an alternative channel. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information within the system...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-4262 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a lack of protection for service data in Windows Defender, which could allow an attacker to gain unauthorized access to a device. It enables attackers to...

PT-2022-4306 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...

When curl < 7.84.0 saves cookies alt-svc and hsts data to local files it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation it might accidentally *widen* the permissions for the target file leaving the updated file accessible to more users than intended.

...

PT-2022-3943 · Microsoft · Windows L2Tp +1

Name of the Vulnerable Software and Affected Versions: Windows Layer 2 Tunneling Protocol L2TP affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Windows, which is associated with insufficient protection of service dat...

The vulnerability in the implementation of the “info-get” configuration module for the “guestinfo.ignition.config.data” library in the Ignition library allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the info-get guestinfo.ignition.config.data configuration implementation in the Ignition library is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the MediaError message in the Mozilla Firefox browser, which allows a violator to disclose protected information

The vulnerability of the MediaError message in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2022-5939

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.84.0 Description The issue is related to how curl saves cookies, alt-svc, and hsts data to local files. When curl performs this operation, it uses a temporary file that is later renamed to the final target filename...

The vulnerability of the Desired State Configuration service in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Operating System’s Desired State Configuration service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...