The vulnerability of the Microsoft Outlook email client, related to insufficient protection of operational data, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Outlook email client is related to insufficient protection for administrative data. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Adobe FrameMaker Publishing Server (FMPS) in automating document publishing and content management processes stems from insufficient protection of administrative data. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Adobe FrameMaker Publishing Server FMPS in automating document publishing and content management is related to insufficient protection of administrative data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges remotely...

The vulnerability of the Blog2Social plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Blog2Social plugin of the WordPress content management system is related to insufficient protection of administrative data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Microsoft Outlook for Android client, related to insufficient protection of administrative data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Microsoft Outlook for Android client is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Joomla! content management system lies in the lack of protection for administrative data, allowing attackers to access confidential information.

The vulnerability of the Joomla! content management system is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Microsoft Outlook email client, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Microsoft Outlook email client is related to insufficient protection for administrative data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Hospitals taken offline after cyberattack

The GHT Coeur Grand Est has become a victim of a cyberattack on the hospital centers of Vitry-le-François and Saint-Dizier. The hospital’s administration has warned French that data have been exfiltrated and might be used for phishing in the future. As a consequence, the GHT Cœur Grand Est has cu...

CVE-2017-15680

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

CVE-2017-15680

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for administrative data, which allows attackers to disclose protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially create...

The vulnerability of Adobe Connect’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the Thunderbird email client, related to the lack of protection for administrative data, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using an embedded form field by pressing the enter key in t...

The vulnerability of Norton Password Manager’s password manager component lies in the lack of protection for service data, which allows attackers to access and disclose the protected information.

The vulnerability of Norton Password Manager’s password manager component is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a hacker to access and disclose the protected information...

The vulnerability in the McAfee Web Gateway, related to the lack of protection for administrative data, allows attackers to disclose the protected information.

The vulnerability of the McAfee Web Gateway is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

The vulnerability of the Moodle learning management system allows a hacker to gain access to personal contact information and details about unread messages.

The vulnerability of the Moodle learning management system’s sub-component message/index.php is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to personal contact information and details...

The vulnerability of the Moodle learning management system allows a hacker to gain access to user account data.

The vulnerability of the login/confirm.php sub-component of the Moodle learning management system is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user account information during attemp...

Hardcoded credentials

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access...

CVE-2007-2695

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access...