The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to disclose protected information.

The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the React Native Bluetooth Scan component of the Bluezone application, which allows a intruder to gain unauthorized access to protected information.

The vulnerability of the React Native Bluetooth Scan component of the Bluezone application’s software interface is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Windows operating system’s kernel, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2023-5138 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a deserialization mechanism flaw in Microsoft Exchange Server, which can be exploited by a remote attacker to gain unauthorized access to protected...

The vulnerability of the Exiv2 metadata management library, related to the use of an uninitialized resource, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Exiv2 metadata management library relates to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the IBM Aspera Faspex file-sharing application configuration allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2023-5064 · Microsoft · Windows Dhcp Server Service +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server Service affected versions not specified Description: The vulnerability is related to insufficient protection of service data in the Windows DHCP Server Service, which can be exploited by a remote attacker to gain...

The vulnerability of the Crucible code-checking tool, as well as the Fisheye tool for code search and comparison, relates to the disclosure of protected information, allowing attackers to expose such protected information.

The vulnerability of the Crucible code-checking tool and the Fisheye code-searching tool is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the extractimagesection function in the libtiff library allows a hacker to disclose protected information or cause service failures.

The vulnerability of the extractimagesection function in the libtiff library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information or cause service failures...

The vulnerability of the JVM component of the cryptographic security tool Bouncy Castle, which allows a hacker to disclose protected information

The vulnerability of the JVM component of the Bouncy Castle cryptographic protection tool relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to disclose the protected information...

The vulnerability of MediaTek’s Bluetooth driver microprogramming software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Bluetooth driver of MediaTek’s microprogramming software is related to the execution of operations outside the buffer in memory, due to insufficient validation of input data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected...

The vulnerability of the Eclipse Jersey framework, related to the creation of temporary files with insecure permissions, allows a perpetrator to disclose protected information.

The vulnerability of the Eclipse Jersey framework lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Bouncy Castle cryptographic protection mechanism lies in errors during the certificate validation process, which allows attackers to disclose the protected information.

The vulnerability of the Bouncy Castle cryptographic protection mechanism is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the nsCodingStateMachine::NextState() function in the Notepad++ text editor allows a hacker to gain unauthorized access to protected information.

The vulnerability of the nsCodingStateMachine::NextState function in the Notepad++ text editor is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of operating systems such as watchOS, iOS, and iPadOS, related to the disclosure of protected information, allows attackers to gain access to confidential data.

The vulnerabilities of operating systems such as watchOS, iOS, and iPadOS are related to the exposure of protected information. Exploiting these vulnerabilities can allow attackers to gain access to confidential information...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow, related to the disclosure of protected information, allows attackers to gain unauthorized access to protected information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the exposure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the FileManager::detectLanguageFromTextBegining() function in the Notepad++ text editor allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the FileManager::detectLanguageFromTextBegining function in the Notepad++ text editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the “Run Task” function in software for creating, monitoring, and orchestrating data processing scenarios allows attackers to access confidential information.

The vulnerability of the “Run Task” function in software for creating, monitoring, and orchestrating data processing scenarios in Airflow is related to the exposure of protected information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after the memory is freed, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed during the processing of annotation objects. Exploiting this...

The vulnerability of the Apache Maven framework, which allows a malicious actor to gain unauthorized access to protected information remotely.

The vulnerability of the Apache Maven framework is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...