PT-2021-3305 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Bind Filter Driver. It may allow an attacker to obtain unauthorized access to protected...

PT-2021-3312 · Microsoft · Windows Server For Nfs +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server for NFS affected versions not specified Description: The vulnerability is related to insufficient protection of service data in Microsoft Windows NFS server, which can allow a remote attacker to gain unauthorized acce...

PT-2021-3286 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Event Tracing service and involves information disclosure. It may allow an attacker to gain unauthorized access to protected information. The vulnerabili...

Reflected cross-site scripting issue in Datasette

Impact The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as...

PDF viewing and editing out-of-buffer DoS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

PDF viewing and editing out-of-buffer DoS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

PDF viewing and editing out-of-buffer DoS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

PDF viewing and editing out-of-buffer DoS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

Moodle Input Verification Unauthorized Access

The vulnerability in the virtual learning environment Moodle exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Diagnostic Assistant Oracle OSS Support Tools Unauthorized Access

The vulnerability of the Diagnostic Assistant component of the Oracle OSS Support Tools software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Oracle Storage Cloud Software Appliance Unauthorized Access

The vulnerability of the Management Console component of the Oracle Storage Cloud Software Appliance is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

Oracle Solaris Common Desktop Environment Data Compromise

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Firefox Security Restriction Unauthorized Access

The vulnerability of Firefox browsers is related to errors in security restrictions on testing infrastructure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Firefox requestPointerLock setTimeout Unauthorized Access

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

BroadWorks Messaging Server Unauthorized Access

The vulnerability in the web interface of the BroadWorks Messaging Server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause service...

Oracle Database Server Unauthorized Access

The vulnerability of the Recovery component of the Oracle Database Server system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle Net protocol...

Database Vault Unauthorized Access

The vulnerability of the Database Vault component of the Oracle Database Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability in the vManage web interface of the Cisco SD-WAN software-defined network is related to authentication process errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending specially crafted HTTP requests...

Google Guava Files createTempDir Unauthorized Access

The vulnerability of the Files.createTempDir function implementation in the Java libraries of Google Guava is related to the incorrect assignment of permissions for the temporary file directory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected informati...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...