System Events Broker Privilege Escalation

The vulnerability of the System Events Broker component in the Windows operating system is related to errors in file operation handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Agent Activation Runtime Disclosure Protected Information

The vulnerability of the Agent Activation Runtime service in the Windows operating system exists due to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

vRealize Operations Authentication Bypass

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MongoDB Authentication Unauthorized Access

The vulnerability of the document-oriented database management system MongoDB is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Server software, the Microsoft Lync Server and Skype for Business Server messaging applications is related to errors in token verification using Oauth. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Graphics Unauthorized Access

The vulnerability of Microsoft Graphics Components in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Profile Service Unauthorized Access

The vulnerability of the Windows operating system’s profile service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

WalletService Windows Unauthorized Access

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

WalletService Windows DoS

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

WalletService Privilege Escalation

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Windows Runtime Code Execution

The vulnerability of the Windows Runtime component of the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

Microsoft .NET Framework XML Processing Code Execution

The vulnerability of the Microsoft .NET Framework software platform, as well as the Microsoft Visual Studio development tools, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server, is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious...

VMware Workspace One Auth Bypass

The vulnerability of VMware Workspace One software is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Website misconfigurations and other errors to avoid

Website owners, listen up: There are lots of things you shouldn’t do with your site, and many more you should avoid with the domains you’re responsible for. Insider malice, bad luck, and the stars aligning in impossible ways can all give your online portfolio a bad hair day. However, if you want ...

SUSE-SU-2020:1914-1 Security update for bind

This update for bind fixes the following issues: - Amended documentation referring to rule types 'krb5-subdomain' and 'ms-subdomain'. This incorrect documentation could mislead operators into believing that policies they had configured were more restrictive than they actually were. CVE-2018-5741 ...

WPA Protocol Implementation hostapd credential disclosure

The vulnerability of the WPA protocol implementation in the hostapd daemon software is related to security mechanism errors. Exploiting this vulnerability can allow a malicious actor to obtain user credentials remotely...

PT-2020-3168

Name of the Vulnerable Software and Affected Versions Windows Credential Enrollment Manager affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Credential Enrollment Manager service. It occurs due to errors in handling objects in...

PT-2020-3446

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Session Border Controller versions 8.1.0 through 8.3.0 Description The issue is related to the File Upload component and can be exploited by a high-privileged attacker with network access via HTTP. Successful attacks require...

PT-2020-3160

Name of the Vulnerable Software and Affected Versions Windows Storage Services affected versions not specified Description The issue is related to errors in handling file operations, which can allow an attacker to elevate their privileges. This can impact the system, potentially allowing attacker...

Microsoft Windows Codecs Code Execution

The vulnerability of the Microsoft Windows Codecs library in the Windows operating system is related to errors in memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to execute arbitrary code...