PT-2023-1068 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can potentially enable the attacker to...

PT-2023-1488 · Amd · Amd System Management Unit +2

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified AMD System Management Unit SMU affected versions not specified AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to errors in...

PT-2023-1065 · Microsoft · Windows Malicious Software Removal Tool

Name of the Vulnerable Software and Affected Versions: Windows Malicious Software Removal Tool affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Malicious Software Removal Tool MSRT, which can allow an attacker to eleva...

PT-2023-1129 · Microsoft · Event Tracing For Windows +1

Name of the Vulnerable Software and Affected Versions: Event Tracing for Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Event Tracing service for Microsoft Windows operating systems. This can allow an attacke...

PT-2023-1139 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows GDI component. This can allow an attacker to elevate their privileges. The vulnerability affect...

PT-2023-1026 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2023-1131 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Installer component of Windows operating systems. This can allow an attacker to eleva...

PT-2023-1159 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Bluetooth driver of Microsoft Windows operating systems. This can allow an attacker to...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1041)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Upgraded Q -> M from #172 [1673039408650]

Judge has assessed an item in Issue 172 as M risk. The relevant finding follows: L-02 --- The text was updated successfully, but these errors were encountered: All reactions...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2023-1106)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2023-1130)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...

EulerOS 2.0 SP11 : libxml2 (EulerOS-SA-2023-1016)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with the XMLPARSEHUGE parser option enabled, sever...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android is vulnerable to resource management errors, which can be exploited by attackers to cause local privilege escalation without additional execution privileges...

The vulnerability in the implementation of the Simple Network Management Protocol (SNMP) on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers, related to errors in request processing, allows a perpetrator to disclose protected information.

The vulnerability of the Simple Network Management Protocol SNMP implementation on Cisco IOS XE Catalyst access points and Cisco Catalyst 9000 wireless network controllers is related to errors in handling requests. Exploiting this vulnerability can allow a malicious actor to disclose protected...

The vulnerability of the MasterUserEdit application interface of the cloud-based corporate solution for planning and managing Jira Align (formerly AgileCraft) programs and IT projects allows a malicious individual to increase their privileges.

The vulnerability of the MasterUserEdit application interface of the cloud-based corporate solution for planning and managing Jira Align formerly AgileCraft programs and IT projects is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their...

PT-2025-49740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s DRM/MSM subsystem related to a workqueue leak occurring during bind errors. Specifically, the workqueue was not being properly destroyed in cases of...

CVE-2022-34670

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to denial of service or...

Disconnected sessions not reconnecting in Server VDA 2203 and higher

After a disconnection the user profile stays active on the server the user was first logged and is locked. When users get disconnected and click the Desktop-icon to get into their session again, they always get a temporary profile on another server. No additional configuration regarding...

Google Chrome Security Update (stable-channel-update-for-desktop_25-2021-05) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...