PT-2023-6974 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can allow an attacker to gain unauthorized access to protected information. Th...

The vulnerability of the GLPI system for requests, incidents, and inventory management, related to the disclosure of information that allows a hacker to expose the protected information

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the GLPI system for requests, incidents, and inventory management, related to the disclosure of information that allows a hacker to expose the protected information

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the DownloadDataFromOfficeMarketPlace method in the Microsoft Exchange Server mail server allows a hacker to disclose protected information.

The vulnerability of the DownloadDataFromOfficeMarketPlace method in the Microsoft Exchange Server mail server is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the SCADA system PcVue, related to the disclosure of information through registration files, allows a intruder to disclose protected information.

The vulnerability of the SCADA system PcVue is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Microweber content management system, related to deficiencies in the error reporting mechanism, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Microweber content management system is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the list_courses() function in the LearnPress plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the listcourses function in the LearnPress plugin of the WordPress content management system is related to deficiencies in the path name limitation for accessing the restricted catalog. This issue affects the processing of $templatepaginationpath, $templatepath, and...

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SNMPv3 software for Virtualize Spectrum virtualization lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the application programming interface of the Elasticsearch search engine allows a hacker to disclose protected information.

The vulnerability of the Elasticsearch search engine’s application programming interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format lies in the lack of authentication for a critical function. This allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to influence the confidentiality and integrity of the protected information...

The vulnerability of the WebApp Provider component of Google Chrome allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s WebApp Provider component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the Downloads component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the Downloads component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Downloads component of the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, and Adobe Acrobat 2017 involve reading data beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, Adobe Acrobat Reader 2020, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting...

The vulnerability of Adobe Dimension’s 3D design software, related to reading beyond the buffer limit, allows attackers to disclose protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Snow License Manager Service Provider Edition software, related to privilege management errors, allows a violator to gain unauthorized access to protected information.

The vulnerability of the Snow License Manager Service Provider Edition software-related license management software is related to privilege management errors. Exploiting this vulnerability allows an intruder to gain unauthorized access to protected information...

The vulnerability of the Printing component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Printing component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

The vulnerability of the Redis database management system’s socket is related to the disclosure of information in the erroneous data area, allowing attackers to disclose protected information.

The vulnerability of the Redis database management system’s Unix socket is related to the use of a resolution mask. This creates a race condition that allows another process to establish an unauthorized connection within a short period of time. Exploiting this vulnerability can enable a hacker to...

PT-2023-6635 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to an inappropriate implementation in the Downloads component of Google Chrome, which allowed a remote attacker to obfuscate security UI via a crafted HTML page...

ROS-20231030-01

A vulnerability in the modmacro component of the Apache HTTP Server web server is related to an out-of-field read. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information...