The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to increase their privileges

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Protobuf data serialization protocol, related to pointer dereferencing errors, allows attackers to cause service failures.

The vulnerability of the Protobuf data serialization protocol is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Perl programming language library HTTP::Tiny involves authentication process errors, which allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language library HTTP::Tiny is related to errors in the TLS certificate authentication process. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Windows Installer installer on Windows operating systems allows a hacker to gain elevated privileges within the system.

The vulnerability of the Windows Installer installer on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the System Settings component in iOS, iPadOS, watchOS, tvOS, and macOS allows attackers to compromise the integrity of protected information.

The vulnerability of the System Settings component in iOS, iPadOS, watchOS, tvOS, and macOS is related to state management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Netskope client service, related to synchronization errors when using a shared resource, allows a perpetrator to increase their privileges.

The vulnerability of the Netskope client service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Sandbox component in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.

The vulnerability of the Sandbox component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to access confidential information and also retain user data...

The vulnerability of the library for working with the DICOM format in DCMT, related to pointer assignment errors, allows attackers to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.

The vulnerability of the Core component in Oracle VM VirtualBox is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Checkmarx plugin in the Jenkins automation server allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the Checkmarx server automation plugin for Jenkins is related to errors during the verification of SSL/TLS certificates. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

Design/Logic Flaw

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch invalid string conversion errors like const message = $ toString: '' which would cause the NodeJS process to crash when sending an unexpected Socket.io...

USN-6236-1 connman vulnerabilities

It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-26675,...

CVE-2023-28513

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 250397...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools: Errors in synchronization when using shared resources allow attackers to circumvent existing security restrictions.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools: Errors in synchronization when using shared resources allow attackers to escalate their privileges.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

PT-2023-3933 · Geovision · Geovision Gv-Adr2701

Name of the Vulnerable Software and Affected Versions: GeoVision GV-ADR2701 affected versions not specified Description: The issue is related to errors in the authentication procedure of the GeoVision GV-ADR2701 IP video surveillance system. An attacker could exploit this by editing the login...

The vulnerability of the Java framework for securing industrial applications using Spring Security stems from configuration errors related to authentication. These errors can occur when using multiple servlets, including the DispatcherServlet in Spring MVC. This vulnerability allows attackers to expose sensitive information and enhance their privileges.

The vulnerability of the Java framework for securing industrial applications using Spring Security is related to errors in authentication configuration. These errors can occur when using multiple servlets, including the DispatcherServlet in Spring MVC. Exploiting this vulnerability allows a...

PT-2023-4726 · Plk-100 · Plk-100

Name of the Vulnerable Software and Affected Versions: PLK-100 affected versions not specified Description: The issue is related to errors in TCP connection processing. It may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a new...

PT-2023-3980 · Oracle · Oracle Business Intelligence Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition version 7.0.0.0.0 Description: The issue is related to errors in processing input data in the Analytics Server component of Oracle Business Intelligence Enterprise Edition. This can be exploited...