Design/Logic Flaw

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

CVE-2014-8688

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

CVE-2014-8688

An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file...

PT-2017-1638

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Services on SharePoint Server version 2013 SP1 Description The issue is related to the improper disclosure of memory contents by Microsoft Office,...

PT-2017-1574

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to a lack of protection for sensitive data in Microsoft Edge, which can be exploited by a remote attacker using a specially crafted website to obtain confidential...

PT-2017-1491

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of protection for sensitive data in the Uniscribe component of the Windows operating system. It can be exploited by a remote attacker using a specially crafted...

PT-2017-1487

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 SP1 Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted web site...

VulnCheck KEV: CVE-2017-0147

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet...

PT-2017-1576

Name of the Vulnerable Software and Affected Versions Internet Explorer versions affected versions not specified Description The issue is related to the execution mechanism of VBS scripts in Internet Explorer, which lacks protection for internal data. This could allow a remote attacker to obtain...

PT-2017-1493

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of protection for sensitive data in the Uniscribe component of the Windows operating system. It can be exploited by a remote attacker using a specially crafted...

PT-2017-1483

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of protection for sensitive data in the Uniscribe component of the Windows operating system. It can be exploited by a remote attacker using a specially crafted...

CVE-2016-8012: Undefined Security Weakness

Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...

PT-2017-1485

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of protection for sensitive data in the Uniscribe component of the Windows operating system. It can be exploited by a remote attacker using a specially crafted...

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

CVE-2016-7409

Dropbear SSH (dbclient and server) before 2016.74 is vulnerable when built with DEBUG_TRACE: local users can read process memory via the -v argument due to a failed remote ident. This CVE affects Dropbear versions prior to 2016.74; remediation is to upgrade to 2016.74 or newer. No exploit details...

CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

CVE-2016-7643

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...

CVE-2016-7598

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information from process...