The vulnerability of the Windows MSCTF Server component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows MSCTF Server component exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the WebP image extension lies in the lack of protection for service data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebP image extension relates to the lack of protection for service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to an incorrect path name limitation for accessing the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of Eclipse Jetty servlet containers, related to duplicate resource operations, allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...

The vulnerability of the Apache CXF web service framework, related to connection establishment errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of Apache CXF web services is related to errors during connection establishment. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the V8 engine of Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the V8 engine implementation in Google Chrome browsers is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability of the Adobe Digital Editions e-book reading program, related to reading beyond the buffer limit, allows a intruder to disclose protected information.

The vulnerability of the Adobe Digital Editions e-book reading software relates to reading outside the buffer boundaries. Exploiting this vulnerability could allow an intruder to disclose protected information...

The vulnerability of the Installation component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Oracle Hospitality Reporting and Analytics’ installation component is related to lack of access control measures. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ANGLE graphics engine in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ANGLE graphics engine in the Google Chrome browser is related to the storage beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-4862 · Microsoft · Windows Delivery Optimization +1

Name of the Vulnerable Software and Affected Versions: Windows Delivery Optimization affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Delivery Optimization service, which can allow an attacker to obtain unauthorized access t...

PT-2020-4797 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Word, associated with authentication weaknesses. Exploitation of this issue may allow an attacker to disclose protected...

PT-2020-4693 · Microsoft · Chakra Scripting Engine +1

Name of the Vulnerable Software and Affected Versions: Chakra Scripting Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to disclose protected information. It affects the Chakra scripting engine, potentially enablin...

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2020-4808 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to errors in processing objects in memory within the Windows Graphics Component. It may allow an attacker to disclose protected information. The...

PT-2020-4796 · Microsoft · Windows Canonical Display Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Canonical Display Driver affected versions not specified Description: The issue is related to errors in processing objects in memory, which can allow an attacker to disclose protected information. This can potentially enable attackers...

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

The vulnerability of the Google Chrome browser’s WebUI user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s WebUI interface relates to the use of memory after it is freed during the processing of HTML content. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...