1994 matches found
The vulnerability of the SAP Diagnostic Agent, related to the lack of protection for operational data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the SAP Diagnostic Agent lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted query...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...
The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system allows a intruder to disclose protected information.
The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information throug...
The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform allows a hacker to gain unauthorized access to protected information.
The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
The vulnerability of the file_copy_fallback() function in the Glib library allows a hacker to gain unauthorized access to protected information.
The vulnerability of the filecopyfallback function in the Glib library is related to incorrect handling of permissions. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Microsoft Graphics Components in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially create...
The vulnerability of the Blink component in Google Chrome browser allows a hacker to disclose protected information.
The vulnerability of the Blink component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...
The vulnerability of Google Chrome’s WebAudio component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s WebAudio component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...
The vulnerability of Blink’s rendering module in Google Chrome browsers allows attackers to circumvent the no-clicking policy and disclose the protected information.
The vulnerability of Blink’s rendering module in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the no-click policy and disclose protected information through a specially created HTML page...
The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...
The vulnerability of the String#unpack method in the Ruby programming language allows attackers to exploit it to disclose protected information.
The vulnerability of the Stringunpack method in the Ruby programming language is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected by this method...
The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using a specially crafted file...
The vulnerability in the implementation of the FileSessionDataStore class for the Jetty HTTP server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the FileSessionDataStore class implementation in the Jetty HTTP server is related to a configuration error in J2EE. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by managing sessions using the...
The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created fi...
The vulnerability of the Apache Thrift interface description language in Node.js allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Apache Thrift interface description language in Node.js lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software lies in its ability to allow unlimited download of files of a dangerous type, enabling an intruder to gain unauthorized access to protected information.
The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software is related to the unlimited download of sensitive files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
The vulnerability of Google Chrome, related to the insecure processing of credit card data during autofilling, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Google Chrome relates to the insecure processing of credit card data during automatic filling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...
The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) encryption function in the Thunderbird email client allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...