Vulnerability of the browser loading functions of Microsoft Edge and Google Chrome, allowing attackers to disclose protected information

The vulnerability of the browser loading functions in Microsoft Edge and Google Chrome is related to errors in the process of revealing information through the executed source code. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of Microsoft Edge and Google Chrome web browsers allows attackers to disclose protected information.

The vulnerability of Microsoft Edge and Google Chrome web browsers’ HTML parsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the syntactic analyzer of the SOAP interpreter for the PHP programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the PHP programming language interpreter is related to the exposure of protected information. Exploiting this vulnerability allows an attacker, operating remotely, to compromise protected information through the SOAP WSDL file...

The vulnerability of the Libraries component of Java SE software platforms, specifically the Oracle GraalVM Enterprise Edition virtual machine, allows attackers to disclose protected information.

The vulnerability of the Libraries component in Java SE software platforms, specifically within the Oracle GraalVM Enterprise Edition virtual machine, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the phpinfo function (ext/standard/info.c) in the PHP programming language interpreter allows a hacker to disclose protected information.

The vulnerability of the phpinfo function ext/standard/info.c in the Apache HTTP Server and the PHP programming language interpreter relates to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

The vulnerability of the exif_process_ifd_in_tiff function in the PHP programming language allows attackers to disclose protected information.

The vulnerability of the exifprocessifdintiff function ext/exif/exif.c in the PHP programming language is related to the disclosure of protected information. Exploiting this vulnerability could allow an attacker to disclose protected information remotely...

CVE-2022-21949

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue...

The vulnerability in the isolated environment of the iframe in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a malicious actor to disclose protected information.

The vulnerability in the isolated environment of the Firefox web browser, Firefox ESR, and Thunderbird email client relates to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

CVE-2021-39803

In Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12...

The vulnerability of the OPC UA Client/Server SDK Bundle for client-server applications in Unified Automation .NET allows a perpetrator to disclose protected information.

The vulnerability of the OPC UA Client/Server SDK Bundle for Unified Automation .NET applications relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to an operation that allows data to be written beyond the buffer in memory, enabling attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memor...

Apperta Foundation OpenEyes 信息泄露漏洞

Apperta Foundation OpenEyes is an open source electronic medical record ERP from the Apperta Foundation. A security vulnerability exists in Apperta Foundation OpenEyes 3.5.1 that allows remote attackers to view sensitive patient information without the expected privilege level...

Design/Logic Flaw

A remote unauthenticated disclosure of information vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...

The vulnerability of the Windows operating system, related to deficiencies in authentication mechanisms, allows attackers to disclose sensitive information that is protected by these mechanisms.

The vulnerability of the Windows operating system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

CVE-2022-25160

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25158

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25158

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

Information disclosure

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...

CVE-2022-25160

Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5UC CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all versions, Mitsubishi Electric MELSEC iQ-R series R00/01/02CPU all versions, Mitsubishi Electric MELSEC iQ-R series...