The vulnerability of the display mechanism of Blink web pages in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Blink web page display mechanism in Microsoft Edge and Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the “Bookmarks” control in Microsoft Edge and Google Chrome browsers allows a hacker to disclose protected information.

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the user authentication mechanism of WebAuthentication browsers Microsoft Edge and Google Chrome allows a perpetrator to disclose protected information.

The vulnerability of the WebAuthentication user authentication mechanism for Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the transaction interface of the PackageKit package manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the transaction interface of the PackageKit package manager is related to insufficient protection of service data. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Accessibility Insights browser extension, related to the lack of data protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Accessibility Insights browser extension is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-3140 · Microsoft · Windows Desired State Configuration +1

Name of the Vulnerable Software and Affected Versions: Windows Desired State Configuration DSC affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Desired State Configuration DSC service. Exploitation of this issue may allow an...

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to violations of secure design principles. These vulnerabilities allow attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to violations of secure design principles. Exploiting the...

The vulnerability of the Windows operating system’s kernel allows unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Kibana data visualization service is related to the disclosure of information, which allows an attacker to expose the protected information.

The vulnerability of the Kibana data visualization service is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the rshutdown function in the PHP programming language allows a hacker to read arbitrary files.

The vulnerability of the rshutdown function in the PHP programming language is related to the exposure of protected information. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the syntactic analyzer of the SOAP interpreter for the PHP programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the PHP programming language interpreter is related to the exposure of protected information. Exploiting this vulnerability allows an attacker, operating remotely, to compromise protected information through the SOAP WSDL file...

The vulnerability of the ems_usb_start_xmit function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the emsusbstartxmit function in the Linux kernel’s drivers/net/can/usb/emsusb.c file is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information from a...

The vulnerability of Jetty servlet containers, which stems from the improper handling of HTTP/0.9 requests, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Jetty server containers exists due to the improper handling of HTTP/0.9 requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information by sending specially crafted HTTP/0.9 requests...

The vulnerability of the phpinfo function (ext/standard/info.c) in the PHP programming language interpreter allows a hacker to disclose protected information.

The vulnerability of the phpinfo function ext/standard/info.c in the Apache HTTP Server and the PHP programming language interpreter relates to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the dsa_sign_setup function in the OpenSSL library, which relates to the disclosure of protected information, allows attackers to circumvent cryptographic mechanisms used for encryption protection.

The vulnerability of the dsasignsetup function in the OpenSSL library is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to circumvent the cryptographic mechanisms used for encryption protection...

The vulnerability of the audit log of the Cisco Digital Network Architecture (DNA) Center allows attackers to disclose protected information.

The vulnerability of the audit journal of the Cisco Digital Network Architecture DNA Center relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the timelib_meridian() function in the PHP programming language allows a attacker to compromise the confidentiality of sensitive information.

The vulnerability of the timelibmeridian function in the PHP programming language is related to the exposure of protected information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of sensitive information...

The vulnerability of Siemens’ TFTP-server implementation for software and software-hardware products arises from the operation that goes beyond buffer boundaries in memory, allowing attackers to gain access to protected information.

The vulnerability of the TFTP server implementation for Siemens’ software and software-hardware products lies in the fact that the operation is carried out outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to gain access to protected information by sending...

The vulnerability of the exif_process_ifd_in_tiff function in the PHP programming language allows attackers to disclose protected information.

The vulnerability of the exifprocessifdintiff function ext/exif/exif.c in the PHP programming language is related to the disclosure of protected information. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...