PT-2023-13776 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.0.0.0 through 6.0.3.7 IBM Sterling B2B Integrator Standard Edition versions 6.1.0.0 through 6.1.2.0 Description: The issue is related to improper access controls, which could allow an...

CVE-2022-43977

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p03.2.2.17p04.7p0. The debug port accessible via TCP a qconn service lacks access control...

CVE-2023-0017 Improper access control in SAP NetWeaver AS for Java

An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current...

SUSE-SU-2022:3691-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2019-8921: Fixed heap-based buffer overflow via crafted request bsc1193237. - CVE-2019-8922: Fixed heap-based buffer overflow via crafted request bsc1193227. - CVE-2020-26558: Fixed vulnerability that may permit a nearby man-in-the-middle...

PT-2022-17447 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to memory corruption due to use after free in a service. This occurs when trying to access maps by different threads, which can lead to instability...

VMware Workspace One Access 权限许可和访问控制问题漏洞

VMware Workspace One Access is a centralized management console from VMware, Inc. that allows you to manage users and groups, set and manage authentication and access policies, as well as add resources to a directory and manage permissions for those resources. A vulnerability exists in VMware...

Microsoft Windows Internet Information Services 权限许可和访问控制问题漏洞

Microsoft Windows Internet Information Services IIS is a Web server from Microsoft Corporation for the Windows Server platform. A vulnerability exists in Microsoft Windows Internet Information Services with privilege permission and access control issues. The following products and editions are...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components with privilege license and access control issues. The following products and versions are affected: Windows 11 for...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Performance Counters with privilege permission and access control issues. The following products and versions are affected:Windows 10 Version...

Apple macOS Catalina Privilege Permission and Access Control Issues Vulnerability (CNVD-2024-17857)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A vulnerability exists in Apple macOS Catalina prior to version 2022-004 in a privilege-granting and access-control issue, which stems from a security restriction incorrectly imposed in PackageKit. A...

AMD System Management Unit 权限许可和访问控制问题漏洞

The AMD System Management Unit SMU is a system management unit at AMD in the United States. A security vulnerability exists in the AMD System Management Unit that stems from the possibility that a malicious or compromised UApp or ABL could change the value used by the ASP for its reserved DRAM to...

Microsoft Win32k 权限许可和访问控制问题漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. Microsoft Win32K is vulnerable to privilege-permission and access-control issues. The following products and editions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows 8.1 for...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components with privilege permission and access control issues. The following products and editions are affected: Windows 10...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected: Windows ...

Microsoft Azure Site Recovery Permissions Licensing and Access Control Issues Vulnerability (CNVD-2022-17999)

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to privilege permission and access control issues. No details of the vulnerability are available at this time...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to privilege permission and access control issues. No details of the vulnerability are available at this time...

SUSE-SU-2022:0723-1 Security update for go1.17

This update for go1.17 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve bsc1195838. - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption bsc1195835. - CVE-2022-23773: Fixed incorrect acce...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...