The vulnerability of the Pocket Outlook Sync (PocketPC) component of the Oracle Sales for Handhelds module in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete protected data.

The vulnerability of the Pocket Outlook Sync PocketPC component of the Oracle Sales for Handhelds component in the Oracle E-Business Suite automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to modify, add, ...

The vulnerability of the Point-to-Point Protocol (PPP) implementation in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Point-to-Point Protocol PPP implementation in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the PDF document viewing program Foxit PDF Reader (formerly Foxit Reader) and the PDF file editing program Foxit PDF Editor (formerly Foxit PhantomPDF) lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the PDF document viewing program Foxit PDF Reader formerly Foxit Reader and the PDF file editing program Foxit PDF Editor formerly Foxit PhantomPDF is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the Jenkins Tuleap Git Branch Source Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Tuleap Git Branch Source Plugin is related to deficiencies in the authentication process when processing the /tuleap-hook/ endpoint. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...

The vulnerability of the Word97Import200.dll library in Corel WordPerfect, a text document creation and editing program, allows attackers to disclose protected information.

The vulnerability of the Word97Import200.dll library, which is part of the Corel WordPerfect text document creation and editing software, relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to disclose protected information through a specially create...

PT-2023-1230 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a cryptographic information disclosure in Windows operating systems, allowing an attacker to disclose protected information. This could enable an attacker to gain...

The vulnerability of the IPPP82.FLT module of the Corel Presentations presentation preparation and viewing software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPPP82.FLT module in the Corel Presentations preparation and presentation software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information using a specially crafted PPT fi...

The vulnerability of Huawei FusionCube’s supervisor, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to disclose protected information.

The vulnerability of Huawei FusionCube relates to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information through a specially crafted HTTP request...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of the libxrdp_send_to_channel() function on the XRDP server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libxrdpsendtochannel function on the XRDP server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows Graphics component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics component in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 arises from reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerability of the ImageConversion.api file in programs for viewing and editing PDF files in Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader Document Cloud 2017 is related to reading data outside of the buffer in memory...

The vulnerability of the Windows DPAPI component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows DPAPI component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Network Policy Server (NPS) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Network Policy Server NPS operating system in Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) lies in the ability to read data beyond the buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to reading beyond the buffer boundaries in memory during the syntax analysis of JP2 files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by opening ...

The vulnerability of the web interface of the security and assessment system, as well as the Nessus tool for assessing vulnerabilities, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of security systems and the Nessus vulnerability assessment tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through embedded debuggi...

PT-2022-5639 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to errors in security settings, allowing an...

The vulnerability of the IBM CICS TX Standard application server, related to data encryption errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM CICS TX Standard application server is related to data encryption errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of Google Chrome’s storage mechanism allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s storage mechanism is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...