Vulnerability of the CrlPlatform.dll library in the CorelDRAW Standard graphic editor, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CrlPlatform.dll library, which is part of the CorelDRAW Standard graphic editor, relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially crafted CDR fi...

The vulnerability of the func2.php function in the web application for managing a medical institution, the PHPGurukul Hospital Management System, allows a perpetrator to disclose protected information.

The vulnerability of the func2.php function in the web application of the PHPGurukul Hospital Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to disclose the protected information remotely...

PT-2022-4945 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 5 Rocket.Chat versions prior to 4.8.2 Rocket.Chat versions prior to 4.7.5 Description: An improper access control issue exists due to insufficient input validation in the getUsersOfRoom Meteor server method. This...

The vulnerability of the cURL command-line utility relates to an error in setting cookies for top-level domain names (TLDs). This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the cURL command-line utility is related to an error in setting cookies for top-level domain names TLDs, where the ending point in the hostname is used. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information using cookie...

The vulnerability of the command-line interface of FortiWeb web applications allows attackers to disclose protected information.

The vulnerability of the command-line interface of FortiWeb web applications is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information using debugging commands...

The vulnerability of the “additional signup fields” function in the Auth0 authentication tool allows a hacker to disclose protected information.

The vulnerability of the “additional signup fields” function in the Auth0 authentication tool is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the gfix utility in the “Red Database” database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the gfix utility in the “Red Database” database management system is related to deficiencies in password masking during user login when the -f command is used as an argument passed to the utility. Exploiting this vulnerability can allow an attacker, operating remotely, to gai...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to insufficient protection of sensitive data, allows attackers to gain access to protected information or cause other adverse effects.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient protection of service data during the processing of CSS. Exploiting this vulnerability can allow a remote attacker to gain access to protected information or perform other malicious...

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Graphics component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Graphics component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Vulnerability of Windows operating systems related to information disclosure, which allows attackers to gain unauthorized access to protected information

Vulnerabilities of Windows operating systems are related to the exposure of information. Exploiting these vulnerabilities can allow a remote attacker to gain unauthorized access to protected information...

PT-2022-2448 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Graphics Component. It may allow a remote attacker to gain unauthorized access to protected...

The vulnerability of the io_rw_init_file function in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the iorwinitfile function fs/iouring.c in the Linux kernel is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability in the Browser Switcher extensions of Microsoft Edge and Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Browser Switcher extension in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this extension...

The vulnerability in the Microsoft Office Graphics package of the Microsoft 365 Apps for Enterprise software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office Graphics Package components in Microsoft 365 Apps for Enterprise lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerabilities of Adobe Flash Player Desktop Runtime, Flash Player for Google Chrome, as well as Adobe Flash Player for Microsoft Edge and Internet Explorer, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to gain unauthorized...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted PDF file...

The vulnerability of the do_soap_call function (ext/soap/soap.c) in the PHP programming language allows a hacker to gain access to protected information.

The vulnerability of the dosoapcall function ext/soap/soap.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information...