The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome allows a hacker to gain unauthorized access to protected information.

The vulnerability of the PDFium web browser’s PDF-content processing component in Google Chrome relates to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

PT-2020-5293 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the implementation of the Kerberos protocol in the Windows operating system, which is associated with a violation of the data protection...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the security mechanisms for server account data in Cisco Expressway software using Relay NAT (TURN) allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection mechanisms of the Cisco Expressway server’s Traversal Using Relay NAT TURN software relates to access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...

The vulnerability of the SOAP API interface of the Cisco IoT Field Network Director software, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the SOAP API interface of the Cisco IoT Field Network Director software solution is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through specially...

The vulnerability of the Windows Delivery Optimization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Delivery Optimization service is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Intel Unite conference call software relates to the execution of operations beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Intel Unite conference communication software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device allows a intruder to gain unauthorized access to protected information.

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Installation component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation component of the Oracle Business Intelligence Enterprise Edition software lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using IIOP and T3 protocols...

The vulnerability of the CAL component of the Oracle Hospitality RES 3700 system management software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CAL component of the Oracle Hospitality RES 3700 restaurant management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using TCP...

The vulnerability of the Pre-Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Pre-Login component of the Oracle FLEXCUBE Direct Banking system relates to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

Vulnerability of the Server component: Security: LDAP Auth of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Server component’s Security: LDAP Auth component of the MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected informati...

PT-2020-4885 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint, which can be exploited by a remote attacker to disclose protected information. Recommendations: A...

The vulnerability of the SQL Extensions component of the Oracle Applications Manager system’s application management tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the SQL Extensions component of the Oracle Applications Manager, a tool for managing Oracle Applications, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using the...

The vulnerability of the RDBMS Security component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RDBMS Security component of the Oracle Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the Oracle Net protocol...

The vulnerability of the General component (jQuery) of the Oracle REST Data Services data service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the General component jQuery in the Oracle REST Data Services data service is related to security mechanism failures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information via the HTTP network...

The vulnerability of the Text Services Framework (TSF) component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Text Services Framework TSF component in Windows operating systems is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...