The vulnerability in the VMI web interface of vCenter Server Appliance, a management tool for VMware vCenter Server virtual infrastructure, allows an attacker to gain unauthorized access to protected information.

The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in system security restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending a specially crafte...

PT-2021-4914 · Microsoft · System Center Operations Manager

Name of the Vulnerable Software and Affected Versions: System Center Operations Manager SCOM affected versions not specified Description: The issue is related to insufficient protection of service data in System Center Operations Manager SCOM, which can allow a remote attacker to gain unauthorize...

The vulnerability of Google Chrome’s browser, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2021-6167 · NetGear · Netgear Rbk352 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10 Description: The issue is related to the lack of protection for service data in the embedded software of NETGEAR...

The vulnerability in the implementation of the Net::FTP class in the Ruby interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability in the implementation of the Net::FTP class in Ruby is related to deficiencies in protecting service data using the PASV command. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

PT-2021-6282 · Microsoft · Windows Redirected Drive Buffering Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Redirected Drive Buffering SubSystem RDBSS affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem RDBSS of the Microsoft Windows operating system...

The vulnerability of the Expression Engine content management system exists due to insufficient verification of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Expression Engine content management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the SegmentAssignmentController.php component of the data management and customer interaction software in the Pimcore Customer Data Framework allows a malicious actor to disclose protected information.

The vulnerability of the SegmentAssignmentController.php component of the data management and customer interaction software in the Pimcore Customer Data Framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

Microsoft Edge browser vulnerability, related to the disclosure of information, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its ability to read data beyond the buffer boundaries, allowing an attacker to disclose protected information.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion software platform, related to the disclosure of information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the ColdFusion software platform is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the FortiMail IBE (Identity-Based Encryption) service of the FortiMail email protection system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of FortiMail IBE’s Identity-Based Encryption service in the email protection system is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

The vulnerability of the Thunderbird email client, related to the disclosure of information, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...