PT-2019-3194

Name of the Vulnerable Software and Affected Versions Lync 2013 Description The issue is related to an information disclosure vulnerability. It is associated with a lack of protection for service data, which could allow a remote attacker to disclose protected information. Recommendations For Lync...

PT-2019-5001

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to an information leak in storage, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This is due to a lack of protection for service data...

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allows a hacker to access unencrypted user accounts on the vulnerable device.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely access unencrypted user accounts o...

PT-2019-5157

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 69 Firefox ESR versions prior to 68.1 Description The issue is related to a lack of protection for service data. It may allow a remote attacker to gain unauthorized access to information. Additionally, there is a...

The vulnerability of the ipddp_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the ipddpioctl function drivers/net/appletalk/ipddp.c in the Linux kernel is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected kernel address information...

PT-2019-5675

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform BI Workspace versions 4.1, 4.2, 4.3 Description The issue allows an attacker to access sensitive data, such as directory structure, leading to information disclosure. This is due to a lack of...

The vulnerability in the fs/ext4/extents.c file of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the fs/ext4/extents.c file of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the net_hash_mix() function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the nethashmix function in the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the Win32k component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Win32k component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Yubico pam-u2f PAM module lies in the lack of protection for service data, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Yubico pam-u2f PAM module is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the `check_request_for_cacheability` function in server software like HAProxy allows attackers to disclose protected information.

The vulnerability of the checkrequestforcacheability function in the HAProxy network software is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a remote request without authentication...

PT-2019-4591

Name of the Vulnerable Software and Affected Versions Huawei PCManager versions prior to 9.0.1.66 Oversea Huawei PCManager versions prior to 9.0.1.70 China Description The issue is related to an information leak. Successful exploitation may allow an attacker to read information. The vulnerability...

The vulnerability of the Windows Event Viewer component (eventvwr.msc) in the Windows operating system, which allows a malicious individual to read arbitrary files

The vulnerability of the Windows Event Viewer component eventvwr.msc in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to read arbitrary files using a specially created XML file...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Windows GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document or web page...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document or web page...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created document...

The vulnerability of the Team Foundation Server and Azure DevOps Server software development tools lies in the lack of protection for service data. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Team Foundation Server and Azure DevOps Server software lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, thereby compromising the confidentiality, integrity, and accessibility of...