PT-2020-4797 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Word, associated with authentication weaknesses. Exploitation of this issue may allow an attacker to disclose protected...

PT-2020-4862 · Microsoft · Windows Delivery Optimization +1

Name of the Vulnerable Software and Affected Versions: Windows Delivery Optimization affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Delivery Optimization service, which can allow an attacker to obtain unauthorized access t...

PT-2020-4693 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to disclose protected information. It affects the Chakra scripting engine, potentially enablin...

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-4808 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Graphics Component. It may allow an attacker to disclose protected information. The...

PT-2020-4796 · Microsoft · Windows Canonical Display Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Canonical Display Driver affected versions not specified Description: The issue is related to errors in processing objects in memory, which can allow an attacker to disclose protected information. This can potentially enable attackers...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to insufficient protection of registration data, allows a hacker to disclose protected information.

The vulnerability of the Red Hat OpenShift Container Platform is related to insufficient protection for registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose the protected information...

The vulnerability of the Google Chrome browser’s WebUI user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s WebUI interface relates to the use of memory after it is freed during the processing of HTML content. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the General component of the Oracle REST Data Services service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the General component of the Oracle REST Data Services is related to security mechanism failures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information via the HTTP network protocol...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft .NET Framework software, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the service for managing access to remote catalogs and authentication mechanisms, related to deficiencies in access control, allows attackers to disclose protected information and compromise its integrity.

The vulnerability of the service for managing access to remote catalogs and the authentication mechanism sssd is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information and compromise its integri...

The vulnerability of the Microsoft SharePoint Server software, related to errors in memory object handling, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft SharePoint Server software is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Exchange Server servers, related to errors in message processing, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Exchange Server is related to errors in message processing. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the set_file_metadata function in the GNU Wget download manager allows a hacker to gain access to protected information.

The vulnerability of the setfilemetadata function in the GNU Wget download manager is related to the lack of protection for metadata. Exploiting this vulnerability could allow an attacker to access protected information...

The vulnerability of the Tricon Communications Module, related to the lack of protection for operational data, allows attackers to disclose the protected information.

The vulnerability of the Tricon Communications Module is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

Huawei Taurus-AN00B Elevation of Privilege Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...

The vulnerability of Intel Thunderbolt controller interfaces, related to insufficient input data validation, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...