PT-2021-3286 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Event Tracing service and involves information disclosure. It may allow an attacker to gain unauthorized access to protected information. The vulnerabili...

PT-2021-3305 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Bind Filter Driver. It may allow an attacker to obtain unauthorized access to protected...

PT-2021-3312 · Microsoft · Windows Server For Nfs +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server for NFS affected versions not specified Description: The vulnerability is related to insufficient protection of service data in Microsoft Windows NFS server, which can allow a remote attacker to gain unauthorized acce...

Reflected cross-site scripting issue in Datasette

Impact The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of the virtual learning environment Moodle, which stems from insufficient verification of input data, allows a intruder to gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Diagnostic Assistant component of the Oracle OSS Support Tools software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostic Assistant component of the Oracle OSS Support Tools software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Management Console component of the Oracle Storage Cloud Software Appliance allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Management Console component of the Oracle Storage Cloud Software Appliance is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Firefox’s requestPointerLock() and setTimeout() methods allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the web interface of the BroadWorks Messaging Server allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability in the web interface of the BroadWorks Messaging Server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause service...

The vulnerability of Firefox browsers, related to errors in security restrictions on testing infrastructure, allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox browsers is related to errors in security restrictions on testing infrastructure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Recovery component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Recovery component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle Net protocol...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN software-defined network is related to authentication process errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending specially crafted HTTP requests...

The vulnerability of the Database Vault component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Database Vault component of the Oracle Database Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle...

The vulnerability of the Files.createTempDir() implementation in the Java libraries of Google Guava allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Files.createTempDir function implementation in the Java libraries of Google Guava is related to the incorrect assignment of permissions for the temporary file directory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected informati...