The vulnerability of Microsoft Edge browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Edge relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created file...

The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Compositing component in the Google Chrome web browser for Windows operating systems is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throug...

The vulnerability in the Google Chrome web browser, related to the use of memory after it is freed, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created malicious web page...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from deficiencies in handling exceptional states, which allows attackers to disclose protected information.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by the...

The vulnerability in the Google Chrome web browser for Windows operating systems, related to the use of memory after it is freed, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Google Chrome web browser for Windows operating systems relates to the use of memory after it is freed during the processing of dialog boxes. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially creat...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

The vulnerability of Adobe Experience Manager’s content and media management system, related to the lack of measures for cleaning incoming data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerabilities of PDF viewing and editing programs developed by Adobe Acrobat, Acrobat Reader, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud involve reading beyond the buffer in memory, allowing attackers to compromise the confidentiality of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat, Acrobat Reader, Adobe Acrobat Document Cloud, and Adobe Acrobat Reader Document Cloud are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to compromise the...

The vulnerability of the Adobe Bridge file manager, related to the use of memory after it is freed, allows a hacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

The vulnerability of Adobe Dreamweaver HTML editor arises due to insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Adobe Dreamweaver HTML editor exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the PDF file viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 lies in the reading beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of the PDF file viewing and editing programs Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the FreeBSD operating systems, related to the use of memory after it is freed, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FreeBSD operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the interface for accessing resources on the Cisco BroadWorks Application Server’s XSI-Actions server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the interface for accessing resources on the Cisco BroadWorks Application Server’s XSI-Actions server is related to deficiencies in data protection. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Apache HTTP Server web server arises from insufficient validation of input data, allowing attackers to compromise the integrity of protected information.

The vulnerability of the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...

PT-2021-3738

Name of the Vulnerable Software and Affected Versions Kubernetes affected versions not specified Description A security issue exists in Kubernetes that could allow users to send network traffic to locations they would not normally have access to. This is due to a confused deputy attack. The issue...

Vulnerability of reply_query() function (forward.c): The Dnsmasq DNS server has vulnerabilities related to errors in implementing security checks for standard elements, allowing attackers to compromise the integrity of protected information.

The vulnerability of the replyquery function forward.c: The Dnsmasq DNS server has vulnerabilities related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

PT-2021-5214 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a Windows SMB information disclosure vulnerability. It allows a remote attacker to disclose protected information. The vulnerability can be exploited to obtain...

The vulnerability of the PHP-Fusion CMS system, related to bypassing the authentication process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PHP-Fusion CMS system relates to the bypassing of the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the admin/user_import.php file in the Chamilo electronic training and content management software, related to the disclosure of protected information, allows a hacker to carry out an XXE attack.

The vulnerability of the admin/userimport.php file function in the Chamilo e-learning and content management software relates to the exposure of protected information. Exploiting this vulnerability could allow a malicious actor to carry out an XXE attack...

The vulnerability of the sscanf() function in the libcurl library, a software tool for interacting with servers via CURL, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the sscanf function in the libcurl library, a software tool for interacting with servers via CURL, is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...