CVE-2021-39086

IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the...

GLSA-202208-29 : Nokogiri: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-29 Nokogiri: Multiple Vulnerabilities - Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schema...

The vulnerability of the Modbus TCP protocol implementation in microprogrammed software for programmable logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, Legacy Modicon Quantum, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Modbus TCP protocol implementation in microprogrammed logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, and Legacy Modicon Quantum, is related to errors in information processing. Exploiting this vulnerability can allow an...

Upgraded Q -> H from 54 [1660349227136]

Judge has assessed an item in Issue 54 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

Upgraded Q -> H from 210 [1660349369322]

Judge has assessed an item in Issue 210 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to bypass the Kerberos authentication process.

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass the Kerberos authentication process...

The vulnerability of the Computational Fluid Dynamics Simcenter STAR-CCM+ software for simulation applications is related to errors in information processing. This vulnerability allows attackers to gain unauthorized access to protected information about the host and the names of users being displayed by the software.

The vulnerability of the Computational Fluid Dynamics Simulation software, Simcenter STAR-CCM+, is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information about the host and the identities of the...

The vulnerability of the Linux operating system’s kernel memory management subsystem, which allows attackers to increase their privileges

The vulnerability of the Linux operating system’s kernel memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Microsoft Excel editors, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Excel editors is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the StorageGRID object storage software, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information or modify the content of notifications.

The vulnerability of the StorageGRID object storage software lies in errors during information processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or modify the content of notifications...

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code or gain unauthorized access to the device.

The vulnerability of the Windows Hyper-V hardware virtualization system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or gain unauthorized access to the device...

The vulnerability of the biometric authentication function of the Windows Hello operating system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function of the Windows Hello operating system is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...

Adobe Reader 2017 Security Update (APSB22-39) - Windows

Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Acrobat 2017 Security Update (APSB22-39) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat DC Continuous Security Update (APSB22-39) - Windows

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

.NET Application Event ID 1026 Inventory.exe unhandled exception

On PVS server, periodic errors every 6-10 minutes are being logged: Application event ID 1026 from .NET with details:Application: Inventory.exe;The process was terminated due to an unhandled exception. Application event ID 1000 with Faulting Application name: Inventory.exe System event ID 36871...

Adobe Acrobat DC Continuous Security Update (APSB22-39) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected Devices Platform Service CDPSvc for Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system, an imitation modeling solution for Oracle Financial Services Applications, relates to code errors that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model application relates to code errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...