PT-2022-23950 · Pdf Xchange · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations. It requires user interaction, such as visiting a malicious page or opening a...

The vulnerability of the monitoring tool for VMware vRealize Operations, related to the disclosure of information in the erroneous data area, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

CVE-2022-20273

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

Heap overflow

In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-206478022...

CVE-2022-20247

In Media, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-229858836...

CVE-2022-20346

In updateAudioTrackInfoFromESDSMPEG4Audio of MPEG4Extractor.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

The vulnerability of the settings in Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of the settings in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the user interface of the WebUI on Google Chrome and Microsoft Edge browsers allows a hacker to disclose protected information.

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Google Chrome and Microsoft Edge browsers, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the Jenkins Repository Connector Plugin, related to deficiencies in the authentication process, allows attackers to disclose sensitive information about the file system.

The vulnerability of the Jenkins Repository Connector Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information about the file system...

PT-2022-4111 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to disclose protected information. This can...

The vulnerability of the LibreOffice office software’s user configuration database allows a hacker to disclose protected information.

The vulnerability of the LibreOffice office software’s user configuration database is related to insufficiently secure data encryption. Exploiting this vulnerability could allow a malicious actor to disclose protected information from a remote location...

PT-2022-23956 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 11.2.1.53537 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this, where the target must visit a malicious page or...

PT-2022-23959 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader version 11.2.1.53537 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required to exploit this issue, where the target must visit a malicious pag...

The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.

The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the Windows Network File System (NFS) allows a hacker to disclose protected information.

The vulnerability of the Windows Network File System NFS operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

CVE-2022-34875

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...