libxrdp_send_to_channel() XRDP Unauthorized Access

The vulnerability of the libxrdpsendtochannel function on the XRDP server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Windows Graphics Unauthorized Access

The vulnerability of the Windows Graphics component in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2022-29839: Insufficiently Protected Credentials

Insufficiently Protected Credentials vulnerability in the remote backups application on Western Digital My Cloud devices that could allow an attacker who has gained access to a relevant endpoint to use that information to access protected data. This issue affects: Western Digital My Cloud My Clou...

Adobe Acrobat ImageConversion.api Heap Buffer Overflow Information Disclosure

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data outside of the buffer in memory...

Windows DPAPI Disclosure

The vulnerability of the Windows DPAPI component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Cisco Identity Services Engine Unauthorized Access

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Network Policy Server Unauthorized Access

The vulnerability of the Network Policy Server NPS operating system in Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CorelDRAW Graphics Suite Buffer Overflow Info Disclosure

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to reading beyond the buffer boundaries in memory during the syntax analysis of JP2 files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening ...

Security and assessment system Web Interface Unauthorized Access

The vulnerability of the web interface of security systems and the Nessus vulnerability assessment tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through embedded debuggi...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...

IBM CICS TX Standard Data Encryption Unauthorized Access

The vulnerability of the IBM CICS TX Standard application server is related to data encryption errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the browser import function implementations in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

Google Chrome Storage Compromise

The vulnerability of Google Chrome’s storage mechanism is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

Xen Hypervisor Unauthenticated Access Disclosure

The vulnerability of Xen hypervisors is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Adobe InDesign Buffer Overflow Info Disclosure

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created file...

Notifications component Google Chrome Data Compromise

The vulnerability of the Notifications component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

Special:ChangeContentModel Hypertext Model

The vulnerability of the Special:ChangeContentModel function in the MediaWiki software, which is used to implement the hypertext environment, is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

Firefox iOS Authentication Bypass

The vulnerability of Firefox browser for iOS is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2022-6237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory management vulnerability in the Linux kernel, specifically concerning the lack of randomization of exception handling stacks. This could allow an attacke...