PT-2024-2253 · Microsoft · Outlook For Android

Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Outlook for Android client. Exploitation of this issue may allow a remote attacker to gain...

PT-2024-2625 · Unknown · Codeium-Chrome

Name of the Vulnerable Software and Affected Versions: codeium-chrome affected versions not specified Description: The issue is related to the lack of protection for service data in the codeium-chrome plugin. An attacker can exploit this to send arbitrary requests to the internal autocomplete...

The vulnerability of the UHCI controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products allows attackers to compromise protected information.

The vulnerability of the UHCI-based USB controller in VMware ESXi, Workstation, Fusion, and Cloud Foundation software products is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information that should be protected...

The vulnerability of the Task Manager module of the VitalPBX unified communication system allows a hacker to execute arbitrary commands.

The vulnerability of the Task Manager module of the VitalPBX unified communication system is related to errors in access control due to insufficient protection of service data during script processing from the /var/lib/vitalpbx directory. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

The vulnerability of the WindowServer component of the macOS operating system, which allows a hacker to gain unauthorized access to the user’s screen.

The vulnerability of the WindowServer component of the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the user’s screen remotely...

The vulnerability of the NSOpenPanel component in the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the NSOpenPanel component in the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

PT-2024-1883 · Microsoft · Teams For Android

Name of the Vulnerable Software and Affected Versions: Microsoft Teams for Android affected versions not specified Description: The issue is related to insufficient protection of service data in Microsoft Teams for Android, which can allow an attacker to gain unauthorized access to protected...

PT-2024-1630 · Qolsys · Qolsys Iq4 Hub +1

Name of the Vulnerable Software and Affected Versions: Qolsys IQ Panel 4 versions prior to 4.4.2 Qolsys IQ4 Hub versions prior to 4.4.2 Description: The issue is related to insufficient protection of service data in the IQ Panel 4 and IQ4 Hub panel software, which could allow unauthorized access ...

The vulnerability of the FileProvider component in the macOS operating system allows a hacker to disclose protected information.

The vulnerability of the FileProvider component in the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Printing component in the macOS operating system allows a hacker to disclose sensitive information that should be protected.

The vulnerability of the Printing component in the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Web page rendering module in WebKit operating systems for macOS, iOS, iPadOS allows attackers to intercept DNS requests with the Private Relay enabled.

The vulnerability of the Web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely intercept DNS requests with Private Relay enabled...

The vulnerability of the Hotspot component of Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition software allows attackers to access confidential information.

The vulnerability of the Hotspot component in Oracle Java SE and Oracle GraalVM for JDK/Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential...

The vulnerability of the Find My function in iOS, watchOS, iPadOS, and macOS systems allows attackers to disclose protected information.

The vulnerability of the Find My function in iOS, watchOS, iPadOS, and macOS is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

OpenJDK: JVM class file verifier flaw allows unverified bytecode execution (8314295)

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or...

PT-2024-1050 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing affected versions not specified Description: The vulnerability is related to insufficient protection of service data in Microsoft Message Queuing, which can allow a remote attacker to gain unauthorized access to...

PT-2024-4789

Name of the Vulnerable Software and Affected Versions: VMware Cloud Director Object Storage Extension affected versions not specified Description: The issue concerns an Insertion of Sensitive Information, where a malicious actor with adjacent access to web/proxy server logging may obtain sensitiv...