The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Secheron SEPCOS Control and Protection Relay

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Secheron Equipment: SEPCOS Control and Protection Relay Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management,...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected information or compromise data integrity.

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Security Bulletin: IBM Robotic Process Automation is vulnerable to insufficiently protected access tokens (CVE-2022-33953))

Summary Security Bulletin: IBM Robotic Process Automation is vulnerable to insufficiently protected access tokens CVE-2022-33953 Vulnerability Details CVEID:CVE-2022-33953 DESCRIPTION: IBM Robotic Process Automation could allow a user with psychical access to the system to obtain sensitive...

7-Zip gets Mark of the Web feature, increases protection for users

One of the most popular zip programs around, 7-Zip, now offers support for "Mark of the Web" MOTW, which gives users better protection from malicious files. This is good news. But what does that actually mean? In the bad old days, opening up a downloaded document could be a fraught exercise...

The vulnerability of the Yandex Browser’s Safe WiFi technology, which allows a hacker to expose protected information.

The vulnerability of the Safe WiFi technology of the Yandex Browser is related to resource release errors. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the NCIE Scanner module in Trend Micro Security’s antivirus protection allows a hacker to exploit it to disclose protected information.

The vulnerability of the NCIE Scanner module in Trend Micro Security antivirus tools exists due to errors in the filtering of system calls. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability relates to Rest interfaces of the Access Mgr component within the Oracle Access Manager software platform of Oracle Fusion Middleware. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of Rest interfaces for Oracle Access Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted HTTP requests...

The vulnerability of the Azure Site Recovery recovery tool allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Azure Site Recovery recovery tool is related to errors in information processing. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Azure Site Recovery recovery tool lies in its ability to disclose information, allowing an intruder to gain unauthorized access to protected data.

The vulnerability of the Azure Site Recovery recovery mechanism is related to the exposure of information. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Skype for Business Server Microsoft Lync Server corporate communication servers lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Silverlight software platform, related to insufficient checking of pointers for access to elements, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Silverlight software platform lies in the insufficient checking of pointers used to access elements in memory when processing objects. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially...

The vulnerability of the Fuchsia operating system’s kernel allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Fuchsia operating system’s kernel is related to the exposure of information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

The vulnerability of the E-Business Suite component XDO, a reporting tool within the Oracle BI Publisher software from Oracle Fusion Middleware, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the E-Business Suite component XDO, a reporting tool within the Oracle BI Publisher software from Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the Manage Proxies component of the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Manage Proxies component of the Oracle E-Business Suite automation system exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Mailer Workflow Notification Mailer component of the Oracle Workflow software, a business automation system within the Oracle E-Business Suite. This component allows unauthorized access by attackers to protected information.

The vulnerability of the Mailer Workflow Notification Mailer component of the Oracle Workflow software in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Application Service component of the software for working with Oracle Web Applications Desktop Integrator allows a perpetrator to gain access to modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Application Service component of the Oracle Web Applications Desktop Integrator software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized...