The vulnerability of the Windows operating system’s kernel, which allows a hacker to elevate their privileges within the system

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...

PT-2022-6670 · Vmware · Vmware Aria Operations For Networks

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks affected versions not specified Description: The issue is related to an information disclosure vulnerability in VMware Aria Operations for Networks. A malicious actor with network access could perform a...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the import function in GitHub’s software platform, based on Git, for collaborative code development on GitLab, allows a perpetrator to execute arbitrary code.

The vulnerability of the import function in GitHub’s software platform for GitLab-based collaborative code development is related to the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Microprogrammed Software in Intel Ethernet controllers series 700 and 722, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet controller software in the 700 and 722 series is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Microsoft Exchange Server mail server, related to deficiencies in access control, allows attackers to disclose protected information.

The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Active Directory Domain Services service on the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the Active Directory Domain Services service on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Jenkins rpmsign-plugin, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Jenkins rpmsign-plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

The vulnerability of the Cisco Identity Services Engine (ISE) platform, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process...

CVE-2022-35225

SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs over the network, resulting in reflected Cross-Site Scripting XSS vulnerability, therefore changing the scope of the attack. This leads to limited impact on...

The vulnerability of the QNAP QVR surveillance system, related to the failure to take measures to neutralize special elements used in the operating system’s command, allows intruders to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the QNAP QVR video surveillance system is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

Teradici Management Console 安全漏洞

Teradici Management Console is a management console from Teradici Canada Inc. It enables IT administrators to easily manage, monitor and scale PCoIP Zero Clients and Remote Workstation Cards in their deployments. A security vulnerability exists in Teradici Management Console version 2.2.0 that...

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Linux operating system’s kernel, related to insufficient entropy, allows attackers to identify clients.

The vulnerability of the Linux operating system’s kernel is related to insufficient entropy. Exploiting this vulnerability allows a remote attacker to identify clients by determining the original TCP ports used by them...

The vulnerability of the embedded images of microprogrammed logic controllers ACE1000 allows a hacker to execute arbitrary code.

The vulnerability of embedded images of microprogrammed logic controllers ACE1000 is related to deficiencies in the algorithm for calculating the check sum. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...