BizTalk Server ESB Toolkit Spoofing

The vulnerability of the BizTalk Server BizTalk ESB Toolkit relates to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

PT-2022-2349 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Advanced Local Procedure Call ALPC handler of the Windows operating system. This can allow an attacker to...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Mosquitto Resource Leak DoS

The vulnerability of the Mosquitto messaging broker is related to incorrect processing of the PUBLISH packet when the topic length is zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Microsoft Windows Privilege Escalation

The vulnerability of the user profile service in the Microsoft Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

MySQL Stored Procedure Resource Leak DoS

The vulnerability of the Server: Stored Procedure component of the MySQL database is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

OTRS Ticket Request System Confidential Data Access

The vulnerability of the OTRS ticket request system is related to errors in permission processing. Exploiting this vulnerability allows a remote attacker to access confidential data...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the trakboxsize function in the MP4Box multimedia platform’s command set is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

DEBIAN-CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by...

Joomla! 4.x < 4.1.1 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.10.7 or 4.x prior to 4.1.1. It is, therefore, affected by multiple vulnerabilities. - Extracting an specifilcy crafted tar package could write files outside of the intended path...

glibc realpath Confidential Information

The vulnerability of the realpath function in the glibc system library is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

MySQL Server DoS

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

MySQL Server Replication DoS

The vulnerability of the MySQL Server database management system’s replication component is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

OpenSSL CMAC Final Function Information Disclosure

The vulnerability of the CMACFinal function in the OpenSSL library is related to errors in encryption results. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

MySQL Server DoS

The vulnerability of the MySQL Server component involves errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

MySQL Server DoS

The vulnerability of the MySQL Server component, specifically stored procedures, is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Adobe Acrobat Classic 2020 Security Update (APSB21-29) - Windows

Adobe Acrobat Classic 2020 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC (Continuous) Security Update (APSB21-29) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cannot input Simplified/Traditional Chinese or Japanese in Windows server 2019/2022 or Windows 10/11

For Windows Server 2019/2022 English OS or Windows 10/11 as VDA, CWA Windows Client uses Microsoft Pinyin IME to input simplified Chinese, Microsoft Bopomofo IME to input traditional Chinese, or Microsoft Japanese IME to input Japanese, keyboard sync mode is configured as "Sync only once" in...

MySQL Server Federated DoS

The vulnerability of the MySQL Server component of the MySQL database management system is related to errors in resource release. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...