The vulnerability of Windows operating systems’ message queues allows attackers to induce service failures.

The vulnerability of Windows operating systems’ message queues is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2023-6134 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S8 Junos OS versions 21.1R1 through 21.2R3-S6 Junos OS versions prior to 21.3R3-S5 Junos OS versions prior to 21.4R3-S4 Junos OS versions prior to 22.1R3-S3 Junos OS versions prior to 22.2R3-S1 Junos OS...

PT-2023-5975 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows a remote attacker to cause a...

PT-2023-5942 · Microsoft +1 · Quic +2

Name of the Vulnerable Software and Affected Versions: Microsoft QUIC affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the QUIC network protocol in the Windows operating system. This can be exploited by a remote attacker t...

PT-2023-6072 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of Windows operating systems. It allows remote attackers to execute arbitrary...

PT-2023-6055 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ versions affected versions not specified Description: The issue is related to insufficient input validation in the Message Queuing component of the Windows operating system. This allows a remote attacker to...

PT-2023-6166 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows TCP/IP protocol implementation. This can be exploited by a remote attacker to cause a denial of service. Recommendations...

PT-2023-6060 · Microsoft · Virtual Trusted Platform Module +1

Name of the Vulnerable Software and Affected Versions: Microsoft Virtual Trusted Platform Module affected versions not specified Description: The issue is related to insufficient input validation in the virtual trusted platform module of Windows operating systems. This can be exploited by attacke...

PT-2023-6044 · Microsoft · Odbc Driver For Sql Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft ODBC Driver for SQL Server. This can allow an attacker to execute arbitrary code...

PT-2023-6153 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The vulnerability is related to insufficient input validation in the Windows Setup Files Cleanup component. It allows remote attackers to execute arbitrary code on the system...

The vulnerability of the user interface for tablet devices running Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of user interfaces for tablet devices running Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the text.php component of the search engine LibreY allows a hacker to perform an SSRF attack.

The vulnerability of the text.php component of the search engine LibreY is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

PT-2023-5459 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CmpAppForce component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CmpAppForce component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the CMPapp component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPapp component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2023-5049 · Microsoft +1 · Visual Studio +2

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Visual Studio, which can allow an attacker to execute arbitrary code. This can potentially lead to remote...

PT-2023-5092 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient input validation in Azure DevOps Server, which can be exploited by a remote attacker using specially crafted data to execute arbitrary code...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, or delete data...