The vulnerability in the Browser Switcher extensions of Microsoft Edge and Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Browser Switcher extension in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this extension...

The vulnerability of the “Bookmarks” control in Microsoft Edge and Google Chrome browsers allows a hacker to disclose protected information.

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability in the Microsoft Office Graphics package of the Microsoft 365 Apps for Enterprise software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office Graphics Package components in Microsoft 365 Apps for Enterprise lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Accessibility Insights browser extension, related to the lack of data protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Accessibility Insights browser extension is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-3140 · Microsoft · Windows Desired State Configuration +1

Name of the Vulnerable Software and Affected Versions: Windows Desired State Configuration DSC affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Desired State Configuration DSC service. Exploitation of this issue may allow an...

GHSA-JJ2F-57JG-5RM6 MoinMoin Improper Access Control

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

FreeBSD : cURL -- Multiple vulnerabilities (92a4d881-c6cf-11ec-a06f-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 92a4d881-c6cf-11ec-a06f-d4c9ef517024 advisory. - A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to violations of secure design principles. These vulnerabilities allow attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to violations of secure design principles. Exploiting the...

The vulnerability of the Kibana data visualization service is related to the disclosure of information, which allows an attacker to expose the protected information.

The vulnerability of the Kibana data visualization service is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

The vulnerability of the Windows operating system’s kernel allows unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerabilities of Adobe Flash Player Desktop Runtime, Flash Player for Google Chrome, as well as Adobe Flash Player for Microsoft Edge and Internet Explorer, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to gain unauthorized...

The vulnerability of the rshutdown function in the PHP programming language allows a hacker to read arbitrary files.

The vulnerability of the rshutdown function in the PHP programming language is related to the exposure of protected information. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

The vulnerability of the syntactic analyzer of the SOAP interpreter for the PHP programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the PHP programming language interpreter is related to the exposure of protected information. Exploiting this vulnerability allows an attacker, operating remotely, to compromise protected information through the SOAP WSDL file...

The vulnerability of the ems_usb_start_xmit function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the emsusbstartxmit function in the Linux kernel’s drivers/net/can/usb/emsusb.c file is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information from a...

The vulnerability of Jetty servlet containers, which stems from the improper handling of HTTP/0.9 requests, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Jetty server containers exists due to the improper handling of HTTP/0.9 requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information by sending specially crafted HTTP/0.9 requests...

The vulnerability of the phpinfo function (ext/standard/info.c) in the PHP programming language interpreter allows a hacker to disclose protected information.

The vulnerability of the phpinfo function ext/standard/info.c in the Apache HTTP Server and the PHP programming language interpreter relates to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

USN-5387-1 barbican vulnerabilities

Douglas Mendizábal discovered that Barbican incorrectly handled access restrictions. An authenticated attacker could possibly use this issue to consume protected resources and possibly cause a denial of service. CVE-2022-23451, CVE-2022-23452...

The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted PDF file...