PT-2022-3850 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It may allow a remote attacker to disclose...

PT-2022-3706 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, which can be exploited by a remote attacker to disclose protected information. Recommendations: At t...

network software insufficient authentication unauthorized access

The vulnerability of the network software for social games and heroiclabs/nakama applications is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

AMD Reordering Unauthorized Access

The vulnerability of AMD’s microprogrammed software for processors is related to the reordering of load instructions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Apache HTTP Server mod_lua RCE

The vulnerability of the r:wsread function in the modlua module of the Apache HTTP Server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Intel Unauthorized Access Disclosure

The vulnerability of Intel microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

MediaError Disclosure Protected Information

The vulnerability of the MediaError message in the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vim ins_bytes() Buffer Overflow

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2022-3488 · Xen +6 · Xen +6

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a disclosure of information in the Xen hypervisor Linux kernel. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At...

Cisco Identity Services Engine Disclosure

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

lim process Qualcomm Embedded Buffer Overflow

The vulnerability of the lim process in microprogramming software in embedded Qualcomm chips is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

SRTP Protocol Unauthenticated Access

The vulnerability of the SRTP protocol implementation in PACsystems microprogrammed logic controllers involves the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PDF plugins Google Chrome Microsoft Edge Disclosure

The vulnerability of PDF browser plugins for Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

File System API Disclosure

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

Extensions API Unauthorized Access

The vulnerability of the Extensions API in Google Chrome and Microsoft Edge lies in the improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Unauthenticated Access Disclosure

The vulnerabilities of Google Chrome and Microsoft Edge exist due to insufficient validation of input data during URL formatting. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Oracle iSupplier Portal Accounts Unauthorized Access

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Database Vault Unauthorized Access

The vulnerability of the Database Vault component of the Oracle Database Server system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle Hyperion Essbase Administration Services Unauthorized Access

The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...

Yandex Safe WiFi Exposure

The vulnerability of the Safe WiFi technology of the Yandex Browser is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to disclose protected information...