The vulnerability of the JetBrains YouTrack project management and task management software, related to deficiencies in authentication mechanisms, allows attackers to circumvent existing security restrictions.

The vulnerability of the JetBrains YouTrack project and task management software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

The vulnerability of Windows operating system update centers allows attackers to enhance their privileges.

The vulnerability of Windows operating system update centers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control mechanisms, allowing attackers to enhance their privileges.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This vulnerability allows a malicious individual to escape from the isolated software environment.

The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain access to the isolated software environment...

The vulnerability of the Adobe FrameMaker Publishing Server (FMPS) in automating document publishing and content management processes stems from authentication procedures that have deficiencies. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Adobe FrameMaker Publishing Server FMPS in automating document publishing and content management processes is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions from a remo...

The vulnerability of the Trusted Computing Base (TCB) system in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Trusted Computing Base TCB system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Poly Lens application interface for phones and audio systems in Poly Trio conferencing systems allows attackers to elevate their privileges.

The vulnerability of the Poly Lens application interface for telephones and conference call audio systems in the Poly Trio device is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2024-2682 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authentication in some Zoom clients, which may allow a privileged user to disclose information via local access. It is also mentioned that the vulnerability is...

The vulnerability of the CoreMessaging service in the Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the CoreMessaging service in the Windows operating system is related to deficiencies in the segmentation of the system’s controlled areas. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in the access control mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the io.netty package: The netty-codec-http network programming framework from Netty allows attackers to exploit it to disclose protected information.

The vulnerability of the io.netty package: The netty-codec-http network programming framework in Netty is related to deficiencies in the system’s controlled zones. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Hazelcast data analysis platform, related to deficiencies in authentication procedures, allows attackers to perform arbitrary actions.

The vulnerability of the Hazelcast data analysis platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions remotely...

The vulnerability of the talagent component in the Mac OS operating system allows attackers to disclose sensitive information.

The vulnerability of the talagent component in the Mac OS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

The vulnerability of the component Koko in the system for auditing the security operations and maintenance of JumpServer, which allows a perpetrator to bypass the authentication process

The vulnerability of the Koko component of the JumpServer security audit system relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

The vulnerability of Zoom’s video conferencing software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Zoom’s video conferencing software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges...

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

The vulnerability of the Named Pipe File System component of the Windows operating system, which allows a hacker to exploit their privileges

The vulnerability of the Named Pipe File System component in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to access control deficiencies, allows a hacker to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...