The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to bypass security functions and gain unauthorized access to protected information.

The vulnerability of the integration component of the Magento Commerce software development and management platform is related to authentication errors. Exploiting this vulnerability allows an attacker to bypass security functions and gain unauthorized access to protected information...

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the implementation of Full Screen Mode in browsers such as Google Chrome and Microsoft Edge allows a malicious actor to disclose protected information or cause service failures.

The vulnerability of the Full Screen Mode implementation in Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information or cause service failures...

The vulnerability of the Windows operating system’s kernel, which allows unauthorized access to protected information

The vulnerability of the Windows operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NVIDIA Linux GPU Display Driver (February 2022)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver, where improper handling of insufficient permissions or privileges ma...

PT-2022-18008 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.3 Description: A race condition was addressed with additional validation. This issue allows a malicious application to modify protected parts of the file system. Recommendations: For versions prior to 12.3, update t...

The vulnerability of NETGEAR RAX43 router’s built-in software arises from buffer overflow attacks, which allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of NETGEAR RAX43 router’s built-in software is caused by buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Redirected Drive Buffering Subsystem in the operating system of Microsoft Windows allows a hacker to disclose protected information.

The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the webNasIPS module of the TerraMaster operating system for TerraMaster TNAS storage devices allows a hacker to gain access to protected information.

The vulnerability of the webNasIPS module in the TerraMaster operating system for data storage devices called TerraMaster TNAS is related to the possibility of executing arbitrary commands. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

The vulnerability of the authenticated user authentication mechanism in the Yokogawa CENTUM VP SCADA system allows a intruder to disclose the protected information.

The vulnerability of the predefined user authentication mechanism in the Yokogawa CENTUM VP SCADA system is related to deficiencies in the authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the Windows Storage Services data storage service in the Microsoft Windows operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows Storage Services data storage service in the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability could allow an attacker to disclose protected information...

PT-2022-2461 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to information disclosure in Windows operating systems. It allows a remote attacker to gain unauthorized access to protected information. This can potentially lead to t...

The vulnerability of the Autofill function implementation in Google Chrome browsers allows attackers to compromise the integrity of the protected information.

The vulnerability of the Autofill function in Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using a specially crafted HTML page...

The vulnerability of Google Chrome’s SwiftShader component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s SwiftShader component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

The vulnerability of the File Manager API of Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the File Manager API in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML...

The vulnerability of NETGEAR’s integrated router software, including models R6260, R6800, R6700v2, R6900v2, R7450, AC2100, AC2400, and AC2600, arises due to buffer overflows in the stack. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the embedded software of NETGEAR routers such as R6260, R6800, R6700v2, R6900v2, R7450, AC2100, AC2400, and AC2600 arises due to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the built-in software of NETGEAR routers such as R6400v2, R6700v3, R7000, R6900P, and R7000P lies in the lack of protection for service data, allowing attackers to exploit this to disclose protected information.

The vulnerability of the built-in software of NETGEAR routers such as R6400v2, R6700v3, R7000, R6900P, and R7000P lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the `__f2fs_setxattr` function in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f2fssetxattr function fs/f2fs/xattr.c in the Linux operating system exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the file system filter driver of the Microsoft Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the file system filter driver in the Microsoft Windows operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite relates to the disclosure of information in the error-prone data area, allowing the disclosure of protected information.

The vulnerability of the Microsoft Visual Basic development environment and the Microsoft Office suite is related to the disclosure of sensitive information in error-prone data areas. Exploiting this vulnerability can allow attackers to disclose protected information...