Google Chrome Web Socket Unauthorized Access

The vulnerability of the Google Chrome web browser’s web socket technology lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache Camel Template Unauthorized Access

The vulnerability of Java-Framework templates in the Apache Camel framework lies in insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

Apache Ant Fixcrlf Unauthorized Access

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker, operating remotely, t...

Apache Camel JMX Unauthorized Access

The vulnerability of the Java Management Extensions JMX in the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Cisco SD-WAN vManage Unauthorized Access

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PDF Reader Buffer Overflow Unauthorized Access

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

Dialog Box Component Unauthorized Access

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Oracle iStore Web Interface Unauthorized Access

The vulnerability of the Web interface component of the Oracle iStore system for creating, managing, and personalizing e-commerce stores is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using t...

Oracle One-to-One Fulfillment Print Server Unauthorized Access

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

Oracle Retail Customer Management Segmentation Foundation Unauthorized Access

The vulnerability of the Internal Operations components of Oracle Retail Customer Management and Segmentation Foundation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause servi...

Dialog Box Component Unauthorized Access Privilege

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

Oracle CRM Technical Foundation Preferences Unauthorized Access

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or delet...

VMware SD-WAN Orchestrator SQL Injection Unauthorized Access

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Oracle VM VirtualBox Unauthorized Access

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Docker Unauthorized Access

The vulnerability of the Windows Docker application for Windows operating systems relates to the disclosure of information. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

Google Chrome Data Compromise

The vulnerability of Google Chrome’s web interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Mozilla Firefox AES-GCM Unauthorized Access

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface in Mozilla Firefox’s browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Mozilla Firefox WebExtensions Unauthorized Access

The vulnerability of the WebExtensions module in the Mozilla Firefox browser is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2021-1543 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows modem.sys Description: The issue exists due to insufficient input validation in the modem.sys component of the Windows operating system. This can allow an attacker to obtain unauthorized access to protected information. The...

PT-2021-1829 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system, specifically Windows GDI+, and is associated with shortcomings in security mechanisms. It may allow a remote attacker to...