The vulnerability of the SMB server’s configuration file smb.conf, which is part of the Samba networking software package, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SMB server’s configuration file smb.conf in the Samba networking software package is related to deficiencies in pathname validation for restricted access directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

The vulnerability of Microsoft Lync Server’s messaging server, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Lync Server’s messaging server is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the FortiOS operating system, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the FortiOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of NVIDIA GeForce, Quadro, and Tesla graphics processors’ software allows attackers to disclose protected information.

The vulnerability of NVIDIA GeForce, Quadro, and Tesla graphics processors relates to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense software allows attackers to gain access to protected information.

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense microprogramming network interfaces arises due to errors in application identification. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the Microsoft Outlook iOS client stems from insufficient validation of input data. This allows attackers to execute cross-site scripting attacks and compromise the integrity of the protected information.

The vulnerability of the Microsoft Outlook iOS client exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute cross-site scripting attacks and compromise the integrity of protected information...

The vulnerability of Google Chrome’s browser-specific page extraction method allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome web browser’s page extraction mechanism is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core-based automation tool for application management, allows attackers to bypass the PowerShell Core Constrained Language Mode and compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerabilities of Microsoft Exchange Server, Microsoft Lync and Skype for Business messaging programs, Microsoft Outlook and Outlook for iOS email clients, as well as Microsoft Office and Office 365 software packages, are related to the lack of protection for mission-critical data. This makes it possible for attackers to disclose protected information.

The vulnerabilities of Microsoft Exchange Server, Microsoft Lync and Skype for Business messaging applications, Microsoft Outlook and Outlook for iOS email clients, as well as Microsoft Office and Office 365 software packages are related to the lack of data protection measures. Exploiting these...

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows attackers to gain access to protected information.

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of RDP clients on Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of RDP clients on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially created application...

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors when copying files using GFILECOPYALLMETADATA from admin:// to file:// URIs. Exploiting this vulnerability allows an...

The vulnerability of Microsoft Edge’s Mark of the Web Tagging (MOTW) mechanism allows attackers to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mark of the Web Tagging MOTW mechanism in Microsoft Edge browser relates to bypassing security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of...