PT-2022-5369 · Microsoft · Windows Usb Serial Driver +1

Name of the Vulnerable Software and Affected Versions: Windows USB Serial Driver affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows USB Serial Driver, which can be exploited to gain unauthorized access to confidential...

PT-2022-7071 · Tionix · Tionix Virtual Security

Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...

The vulnerability in the Firefox web browser, related to insufficient protection of service data, allows a hacker to gain unauthorized access to protected information.

The vulnerability in the Firefox web browser is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mozilla Firefox browser, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-6280 · Dell · Dell Geodrive

Name of the Vulnerable Software and Affected Versions: Dell GeoDrive versions 2.1 through 2.2 Description: The issue is related to the lack of protection for service data in the graphical interface of the local file system. This could allow an attacker to disclose protected information. An...

PT-2022-6461 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to the lack of protection for service data in the ntpd daemon microcode of the ESR-20 service router. This could allow a remote attacker to gain preliminary information...

The vulnerability of the Crow web service framework relates to the lack of protection for service-related data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Crow web service creation framework is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to gain unauthorized access to a device.

The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

The vulnerability of Intel microprogramming software relates to insufficient protection of service data through the use of an alternative channel, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of Intel microprogramming software is related to insufficient protection of service data through the use of an alternative channel. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information within the system...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of Microsoft Windows Defender operating system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to disclose protected information.

The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the Windows GDI+ component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI+ component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-4306 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...

PT-2022-4262

Name of the Vulnerable Software and Affected Versions Windows Defender affected versions not specified Description The issue is related to a lack of protection for service data in Windows Defender, which could allow an attacker to gain unauthorized access to a device. It enables attackers to obta...

CVE-2022-27535: Undefined Security Weakness

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

When curl < 7.84.0 saves cookies alt-svc and hsts data to local files it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation it might accidentally *widen* the permissions for the target file leaving the updated file accessible to more users than intended.

...