The vulnerability of the web interface of the security and assessment system, as well as the Nessus tool for assessing vulnerabilities, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of security systems and the Nessus vulnerability assessment tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through embedded debuggi...

The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) lies in the ability to read data beyond the buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to reading beyond the buffer boundaries in memory during the syntax analysis of JP2 files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening ...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...

The vulnerability of the IBM CICS TX Standard application server, related to data encryption errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM CICS TX Standard application server is related to data encryption errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of Google Chrome’s storage mechanism allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s storage mechanism is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

The vulnerability in the implementation of browser import functions by Google Chrome and Microsoft Edge allows attackers to disclose protected information.

The vulnerability of the browser import function implementations in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

The vulnerability of Xen hypervisors, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading beyond the buffer in memory, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file...

The vulnerability of the Notifications component of the Google Chrome browser allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Notifications component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Special:ChangeContentModel function in the software for implementing a hypertext environment like MediaWiki allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Special:ChangeContentModel function in the MediaWiki software, which is used to implement the hypertext environment, is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of Firefox browser for iOS, related to authentication errors, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Firefox browser for iOS is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2022-6237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory management vulnerability in the Linux kernel, specifically concerning the lack of randomization of exception handling stacks. This could allow an attacke...

The vulnerability of the Apex One antivirus software is related to deficiencies in its authentication process. This allows unauthorized users to gain access to protected information and circumvent security restrictions.

The vulnerability of the Apex One antivirus software is related to deficiencies in the authentication process when processing request parameters. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and circumvent security...

The vulnerability of the Input component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the Input component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

PT-2022-5780 · Microsoft · Network Device Enrollment Service +1

Name of the Vulnerable Software and Affected Versions: Network Device Enrollment Service NDES affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions and disclose protected information. I...

PT-2022-7383 · Dell · Dell Bsafe Crypto-C Micro Edition +1

Name of the Vulnerable Software and Affected Versions: Dell BSAFE Crypto-C Micro Edition versions before 4.1.5 Dell BSAFE Micro Edition Suite versions before 4.6 Description: The issue is related to an Observable Timing Discrepancy, which can be exploited to reveal protected information. This is...

The vulnerability of the Core component of the ZFS Storage Appliance Kit allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the Core component of the ZFS Storage Appliance Kit exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information using the HTTP protocol...

The vulnerability of the webapps component of the server container in Eclipse Jetty allows a hacker to gain unauthorized access to protected information.

The vulnerability of the webapps component of the server container in Eclipse Jetty is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...