13156 matches found
The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...
The vulnerability of Google Chrome’s WebAudio component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s WebAudio component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...
The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.
The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...
The vulnerability in the implementation of the CORS mechanism for the Google Chrome browser allows a hacker to disclose protected information.
The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...
The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially create...
The vulnerability of the Open Enclave SDK, a software development tool, is related to an object processing error in memory, which allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the String#unpack method in the Ruby programming language allows attackers to exploit it to disclose protected information.
The vulnerability of the Stringunpack method in the Ruby programming language is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected by this method...
The vulnerability of the Blink component in Google Chrome browser allows a hacker to disclose protected information.
The vulnerability of the Blink component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...
The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.
The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.
The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...
The vulnerability of the Apache Thrift interface description language in Node.js allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Apache Thrift interface description language in Node.js lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
FreeBSD : Gitlab -- Multiple Vulnerabilities (1aa7a094-1147-11ea-b537-001b217b3468)
Gitlab reports : Path traversal with potential remote code execution Private objects exposed through project import Disclosure of notes via Elasticsearch integration Disclosure of comments via Elasticsearch integration DNS Rebind SSRF in various chat notifications Disclosure of vulnerability stat...
The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software lies in its ability to allow unlimited download of files of a dangerous type, enabling an intruder to gain unauthorized access to protected information.
The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software is related to the unlimited download of sensitive files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using a specially crafted file...
The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) encryption function in the Thunderbird email client allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...