The vulnerability of the IPC CanvasTranslator component in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IPC CanvasTranslator component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software allows a perpetrator to gain access to protected information.

The vulnerability of the LoadLibrary function in the cross-platform framework for developing Qt software relates to the possibility of bypassing the directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to gain...

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, arises due to errors in processing hypertext links. This vulnerability allows an intruder to gain unauthorized access to protected information.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to errors in processing hypertext links. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the fs.openAsBlob() method in the Node.js software platform allows attackers to compromise the integrity of protected information.

The vulnerability of the fs.openAsBlob method in the Node.js programming platform is related to errors in using the --allow-fs-read flag for file system access. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

The vulnerability of the Windows Group Policy component of the operating system allows attackers to disclose sensitive information that is protected by this mechanism.

The vulnerability of the Windows Group Policy component of the operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from the use of a strictly encrypted cryptographic key. This allows an intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected information...

The vulnerability in the implementation of the QUIC network protocol of Google Chrome allows a attacker to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s QUIC protocol implementation is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information from a remote location...

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to execute a type of attack known as “man-in-the-middle” attack.

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of encryption measures for protected data. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

The vulnerability of the macOS operating system’s Shortcuts component, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the macOS operating system’s Shortcuts component is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Model I/O framework in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Model I/O framework in macOS operating systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Voice Memos component of the macOS operating system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Voice Memos component of the macOS operating system is related to access control deficiencies. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

The vulnerability of the SAP Host Agent, a software tool for managing product lifecycles, stems from deficiencies in the authentication process. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Product Lifecycle Management Software, SAP Host Agent, is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2023-4677 · Unknown · Mxsecurity

Name of the Vulnerable Software and Affected Versions: MXsecurity versions prior to v1.0.1 Description: The issue is related to inadequate authentication measures in the MXSecurity platform, which can allow a remote attacker to gain unauthorized access to protected information. This can potential...

The vulnerability of the ConnectionStrings.config component in the “Terrasoft” CRM system and the “Creatio” BPM system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ConnectionStrings.config component in the “Terrasoft” CRM system and the “Creatio” BPM system is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

PT-2023-4381 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Cryptographic Services, which can be exploited to disclose protected information. This...

The vulnerability of the Runtime Workbench component of the SAP NetWeaver Process Integration software, which allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Runtime Workbench RWB component of the SAP NetWeaver Process Integration software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of protected information...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in state management errors caused by excessive amounts of cookies in the document.cookie file. This allows attackers to influence the integrity of the protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to state management errors caused by excessive amounts of cookies in the document.cookie file. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected informati...

The vulnerability of Java-Framework templates in the Apache Camel framework, related to information disclosure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java framework Apache Camel is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the XFRM subsystem in the Linux operating system is related to reading memory beyond the boundaries of the allocated buffer in the net/xfrm/xfrmuser.c module. Exploiting this vulnerability can allow an attacker to gain access to protected information...