The vulnerability of the Centralized Third-party Jars component (OkHttp) of the Oracle Access Manager control system allows a hacker to disclose protected information.

The vulnerability of the Centralized Third-party Jars component OkHttp in the Oracle Access Manager access control tool is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the EisBaer SCADA system, related to the storage of passwords in an unencrypted form, allows a intruder to expose the protected information and compromise the system.

The vulnerability of the EisBaer SCADA system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability can allow a perpetrator to disclose protected information and compromise the system...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to...

The vulnerability of the CharDistributionAnalysis::HandleOneChar function in the NotePad++ text editor allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CharDistributionAnalysis::HandleOneChar function in the NotePad++ text editor is related to the execution of operations outside the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of encryption measures for protected data. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the udf_close_lvid() function in the fs/udf/super.c module of the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the udfcloselvid function in the fs/udf/super.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Windows NFS Portmapper component on Windows operating systems, which allows a hacker to disclose sensitive information

The vulnerability of the Windows NFS Portmapper component in operating systems involves a lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

Vulnerabilities of operating systems iOS and iPadOS, related to lack of access control, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...

The vulnerability of the Point-to-Point Protocol (PPP) implementation in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Point-to-Point Protocol PPP implementation in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2022-7234 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Ventura 13 Description: The issue is related to insufficient access control in the APFS component of the macOS operating system. Exploitation of this issue may allow an attacker to disclose protected information. An ap...

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

The vulnerability of the func2.php function in the web application for managing a medical institution, the PHPGurukul Hospital Management System, allows a perpetrator to disclose protected information.

The vulnerability of the func2.php function in the web application of the PHPGurukul Hospital Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to disclose the protected information remotely...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

The vulnerability of the portal/patient/_machine_config.php component of the software for managing medical organizations OpenEMR allows a intruder to gain unauthorized access to protected information.

The vulnerability of the portal/patient/machineconfig.php component of the software for managing medical organizations OpenEMR is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gai...

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

The vulnerability in the web interface of the BroadWorks Messaging Server allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability in the web interface of the BroadWorks Messaging Server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause service...

The vulnerability of the components of Oracle Retail Customer Management and Segmentation Foundation’s software for internal operations allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Internal Operations components of Oracle Retail Customer Management and Segmentation Foundation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause servi...

The vulnerability lies in the implementation of the PrintData or PrintStats functions in the network traffic balancing system’s Keepalived component. This allows attackers to gain access to the protected information.

The vulnerability of the PrintData or PrintStats implementation in the network traffic balancing system of Keepalived lies in the lack of protection for service data when the MODE=“0666” mode is used. Exploiting this vulnerability can allow an attacker to gain access to the protected information...

The vulnerability of the security mechanisms for server account data in Cisco Expressway software using Relay NAT (TURN) allows attackers to gain unauthorized access to protected information.

The vulnerability of the data protection mechanisms of the Cisco Expressway server’s Traversal Using Relay NAT TURN software relates to access control deficiencies. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information...