13335 matches found
PT-2020-1677
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. The...
PT-2020-1602
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory within the Windows Function Discovery service of Windows operating systems. It allows an attacker to potentially elevate their...
PT-2020-1708
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects in the Windows Cryptography Next Generation CNG service of Windows operating systems. It may allow an attacker to disclose protected...
PT-2020-1658 · Microsoft · Chakracore +1
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining th...
PT-2020-1700
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling memory objects in the Connected Device Platform Service CDPSvc of the Windows operating system. It allows an attacker to potentially elevate their...
PT-2020-1625
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations At the moment, there ...
PT-2020-1675
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server. This vulnerability could allow a remote attacker to gain elevated privileges,...
libzypp Unauthenticated Information Disclosure
The vulnerability of the libzypp library in SUSE CaaS Platform and SUSE Linux Enterprise Server software is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information...
ajaxArchiveFiles.php Command Execution
The vulnerability of the ajaxArchiveFiles.php component, a utility for managing the configuration of rConfig network devices, is related to errors in handling HTTP requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system by sending...
PT-2020-1623
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory, allowing an attacker to potentially elevate their privileges. This could affect the system, enabling attackers to impact it. Ther...
Siemens Industrial Products SNMP (Update F)
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
RUSTSEC-2020-0169 multi_mut is Unmaintained
Last release was about 6 years ago. There is an outstanding soundness issue. The maintainer has not responded for two years to the existing soundness issue. Rust compiler has enabled errors relating to LLVM noalias rules and may not compile anymore where as the old compiler versions had turned...
Oracle Solaris Kernel DoS
The vulnerability of the Oracle Solaris operating system’s kernel is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Enterprise Config Management Unauthorized Access
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, obtain unauthorized access to protected information, ...
Enterprise Manager Base Platform Data Modification Privilege Escalation
The vulnerability of the Repository component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability may allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information, or cause a partial...
Server MySQL DoS
Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Outside In Filters Component DoS
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the HTTP protocol...
Enterprise Config Management Privilege Escalation
The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to resource release errors. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, gain unauthorized access to protected information...
MySQL Server DoS
The vulnerability of the MySQL Server component relates to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions...
MySQL Server DoS
The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...