Jenkins Coverity Plugin Auth Bypass

The vulnerability of the Jenkins Coverity Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins OpenShift Deployer Plugin Auth Bypass

The vulnerability of the Jenkins Deployer Framework Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Jenkins Compuware Xpediter Code Coverage Plugin Auth Bypass

The vulnerability of the Jenkins Compuware Xpediter Code Coverage Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2022-4115 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to an information disclosure problem. It allows a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment...

Dynamo Application Framework Oracle Commerce Disclosure

The vulnerability of the sub-component of the Dynamo Application Framework within the Oracle Commerce Platform of the e-commerce platform Oracle Commerce is related to the disclosure of information. Exploiting this vulnerability could allow an attacker to disclose the protected information...

Oracle WebCenter Content Disclosure Information

The vulnerability of the Oracle WebCenter Content component of the Oracle Fusion Middleware software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information or gain access to read, modify, add, or delete data...

NVIDIA Virtual GPU Manager Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Pinniped Group Membership Handler Data Compromise

The vulnerability of the Group Membership Handler component in Kubernetes authentication services exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Azure Site Recovery Disaster Recovery Access Control Information Disclosure

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

PT-2022-4038 · Jenkins · Jenkins Repository Connector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Repository Connector Plugin versions 2.2.0 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins Repository Connector Plugin, allowing remote attackers with Overall/Read permission to...

BitLocker Data Protection Unauthorized Access

The vulnerability of BitLocker’s data protection function in the Windows operating system is related to the exposure of information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

Azure Site Recovery Disaster Recovery Access Control Information Disclosure

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

Thunderbird Unauthenticated Access

The vulnerability of the Thunderbird email client stems from insufficient verification of data authenticity when the space character is used in the Braille table. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by sendi...

WHATWG Fetch API Node.js Cookie Handling Unauthorized Access

The vulnerability of the WHATWG Fetch API interface for Node.js’ cross-fetching mechanism is related to errors in cookie handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

389 Directory Server Search Filter LDBM Search Unauthorized Access

The vulnerability of the search filter in the 389 Directory Server service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

DA50N Network Switch Unauthorized Access

The vulnerability of the DA50N network switch web interface is related to insufficient protection of registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

PT-2022-3706 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, which can be exploited by a remote attacker to disclose protected information. Recommendations: At t...

PT-2022-4304

Name of the Vulnerable Software and Affected Versions Azure Storage Library affected versions not specified Description The issue is related to insufficient access controls in the system, which can be exploited by a remote attacker to gain unauthorized access to protected information...

PT-2022-3850 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It may allow a remote attacker to disclose...