The vulnerability of Microsoft Edge browser (based on Chromium) relates to the lack of protection for service data, allowing a perpetrator to disclose protected information.

The vulnerability of Microsoft Edge based on Chromium is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2023-29776 · Org.Dom4J · Org.Dom4J

Name of the Vulnerable Software and Affected Versions: org.dom4j SAXReader versions 2.1.4 and before Description: The issue allows a remote attacker to obtain sensitive information via the setFeature function. However, it's noted that the underlying vulnerability could not be reproduced...

CVE-2023-35663

In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of Apache Tomcat application servers exists due to incomplete cleaning of temporary or auxiliary resources, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Apache Tomcat application server exists due to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2022-32755

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...

Google Pixel Buffer Error Vulnerability

The Google Pixel is a smartphone from Google, Inc. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the ProtocolEmergencyCallListIndAdapter::Init method of protocolcalladapter.cpp, which may result in out-of-bounds reads. This could lead to remote...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a lack of bounds checking in the ProtocolEmbmsGlobalCellIdAdapter::Init method of protocolembmsadapter.cpp, which may result in out-of-bounds reads. This could le...

The vulnerability of the Microsoft Visual Studio software development tool, related to insufficient protection of sensitive data, allows attackers to disclose protected information.

The vulnerability of the Microsoft Visual Studio software relates to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Information disclosure

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed...

PT-2023-27553 · Unknown · Jpg Driver

Name of the Vulnerable Software and Affected Versions: jpg driver affected versions not specified Description: The issue is related to a logic error in the jpg driver, which could lead to a use after free scenario. This might result in remote information disclosure without requiring additional...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of protected information, allows attackers to disclose such information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS allows a hacker to disclose protected information.

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PT-2023-28275 · Unknown · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose sensitive information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the software interface of the IBM Robotic Process Automation software, related to authentication errors, allows a perpetrator to disclose sensitive information about the vulnerable system.

The vulnerability of the software interface of the IBM Robotic Process Automation tooling lies in authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information about the vulnerable system...

PT-2023-28270 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this, where the target mus...

CVE-2023-42399

Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component...

PT-2023-28269 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicio...

PT-2023-5565 · Huawei · Harmonyos +1

Name of the Vulnerable Software and Affected Versions: DDMP module affected versions not specified Description: The issue is related to a data security classification vulnerability in the DDMP module, which may affect confidentiality. Successful exploitation of this vulnerability could allow a...