PT-2021-6282 · Microsoft · Windows Redirected Drive Buffering Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Redirected Drive Buffering SubSystem RDBSS affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem RDBSS of the Microsoft Windows operating system...

Pimcore Customer Data Framework SegmentAssignmentController.php Disclosure

The vulnerability of the SegmentAssignmentController.php component of the data management and customer interaction software in the Pimcore Customer Data Framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

Expression Engine Input Verification

The vulnerability of the Expression Engine content management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PDF Buffer Overflow Information Disclosure

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious...

PDF viewer Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

PDF viewer Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

PDF viewer Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

Microsoft Exchange Server Authentication Bypass

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Adobe DNG Software Development Kit Buffer Overflow Information Disclosure

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

ColdFusion Information Disclosure

The vulnerability of the ColdFusion software platform is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

FortiMail IBE Unauthorized Access

The vulnerability of FortiMail IBE’s Identity-Based Encryption service in the email protection system is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

Thunderbird Encryption Access

The vulnerability of the Thunderbird email client is related to the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Thunderbird S/MIME Unauthorized Access

The vulnerability of the S/MIME protocol implementation in Thunderbird’s email client is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Thunderbird Information Disclosure

The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...

FortiMail IBE Unauthorized Access

The vulnerability of the FortiMail IBE Identity-Based Encryption service of the FortiMail email protection system lies in the lack of encryption measures for protected data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informati...

PDF Memory Leak Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...

PT-2021-3830 · Microsoft · Windows Services For Nfs +1

Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient protection of service data, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...

PDF Reader Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

Bosch IP Camera Authentication Bypass

The vulnerability of the microprogrammed IP cameras from Bosch, models CPP6 UHD/MP, CPP7 UHD/MP, and CPP7.3 UHD/MP, is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability can allow an unauthorized person to gain unauthorized access to protecte...