DevTools Google Chrome Unauthorized Access

The vulnerability of the DevTools suite for web development in the Google Chrome web browser relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by opening a specially created malicious web...

PDF viewer Buffer Overflow Information Disclosure

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

Keycloak Authentication Flaw

The vulnerability of the Keycloak identity and access management software is related to shortcomings in the WebAuthn authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2021-5015

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to a component of Microsoft Windows, specifically Media Foundation, and involves the disclosure of information. Exploitation of this issue could allow an attack...

Machform upload.php Data Compromise

The vulnerability in the upload.php PHP form builder of Machform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Cisco Identity Services Engine Code Execution

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

OpenEMR portal/patient/_machine_config.php Unauthorized Access

The vulnerability of the portal/patient/machineconfig.php component of the software for managing medical organizations OpenEMR is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gai...

Magento Commerce Access Control

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected data...

Symfony Information Disclosure

The vulnerability of the Symfony software platform for developing and managing web applications is related to the exposure of sensitive information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Red Hat Enterprise Linux Bluetooth Stack Unauthorized Access

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel is related to errors in processing certain AMP packets. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

Linux Kernel do_hidp_sock_ioctl Disclosure

The vulnerability of the dohidpsockioctl function in the Linux kernel’s net/bluetooth/hidp/sock.c file is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to disclose protected information using the HIDPCONNADD command...

Mac OS Data Protection Unauthorized Access

The vulnerability of Mac OS operating systems is related to deficiencies in data protection. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to protected information...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

OpenSSL AVX2 Montgomery Unauthorized Access

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

IBM Security Verify Access Information Disclosure

The vulnerability of the IBM Security Verify Access system is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Apache Derby Resource Management Unauthorized Access

The vulnerability of the Apache Derby database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

Apex One OfficeScan Information Disclosure

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Apex One OfficeScan Information Disclosure

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Apex One OfficeScan Information Disclosure

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apex One OfficeScan Information Disclosure

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...