The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UPDATE command implementation in the PostgreSQL database management system is related to memory release errors. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions

Researchers have disclosed significant security weaknesses in popular antivirus software applications that could be abused to deactivate their protections and take control of allow-listed applications to perform nefarious operations on behalf of the malware to defeat anti-ransomware defenses. The...

The vulnerability of the virtual learning environment Moodle, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability in the virtual learning environment Moodle is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the virtual learning environment Moodle, related to the disclosure of information that allows a intruder to gain unauthorized access to protected information in CSV format.

The vulnerability in the virtual learning environment Moodle is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information in CSV format...

The vulnerability of the virtual learning environment Moodle, which stems from insufficient verification of input data, allows a intruder to gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

8x8: [jitsi-meet] Authentication Bypass when using JWT w/ public keys

A Prosody module allows the use of symmetrical algorithms to validate JWTs. This means that tokens generated by arbitrary sources can be used to gain authorization to protected rooms. There are no known incidents related to this vulnerability. Please refer to the published advisory:...

CVE-2021-22737

Insufficiently Protected Credentials vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack...

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps arises from the possibility of writing operations beyond the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages and Microsoft Office Web Apps is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2021-22737

The CVE-2021-22737 issue affects Schneider Electric’s homeLYnk (Wiser For KNX) and spaceLYnk, specifically versions prior to V2.60. The root cause is Insufficiently Protected Credentials, which could allow unauthorized access once credentials are discovered after a brute-force attack. Public docu...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their security vulnerabilities related to data protection, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to deficiencies in data protection. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Diagnostic Assistant component of the Oracle OSS Support Tools software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostic Assistant component of the Oracle OSS Support Tools software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2021-5441 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A logic issue was addressed with improved state management, which could allow a...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Management Console component of the Oracle Storage Cloud Software Appliance allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Management Console component of the Oracle Storage Cloud Software Appliance is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the CSC service in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CSC service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...