The vulnerability of the mincore() function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the mincore function mm/mincore.c in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the CORS component of Apache Tomcat servers allows attackers to access protected information.

The vulnerability of the CORS component in Apache Tomcat servers is related to insufficient access control. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the Core sub-component of the Oracle VM VirtualBox, which allows a hacker to disclose protected information

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Core sub-component of the Oracle VM VirtualBox allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data...

The vulnerability of the implementation of TLS and SSL software such as Mbed TLS lies in the local synchronization during RSA decryption, which allows attackers to gain access to protected information.

The vulnerability of the implementation of TLS and SSL software developed by Mbed TLS relates to local synchronization during RSA decryption. Exploiting this vulnerability can allow attackers to gain access to protected information...

Microsoft Edge’s browser vulnerability, related to errors in request handling mechanisms, allows for breaches of the confidentiality and integrity of protected information.

The vulnerability of Microsoft Edge is related to errors in the request processing mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially crafted web page...

The vulnerability of the Core sub-component of the Oracle VM VirtualBox allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the VRDP protocol...

The vulnerability of the Palo Alto Networks Expedition configuration migration software lies in its authentication procedures’ deficiencies, which allow attackers to gain access to protected information.

The vulnerability of the Expedition Migration Tool’s migration tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of Excel spreadsheet editors, related to errors in memory object processing, allows attackers to gain access to protected information.

The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...

The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Microsoft Windows operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the Blink web browser component in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Blink web browser component of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...

The vulnerability of the Exchange Outlook Web Access (OWA) component of the Microsoft Exchange Server allows a hacker to disclose protected information.

The vulnerability of the Exchange Outlook Web Access OWA component of the Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by sending a specially crafted email message to the user,...

The vulnerability of D-Link DIR-620 router’s microprogramming software, related to deficiencies in access control, allows attackers to gain access to protected information.

The vulnerability of D-Link DIR-620 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information from a remote location...

The vulnerability of the Windows Media Player component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of Windows Media Player on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to determine whether files exist on the disk by using a specially created hyperlink...

The vulnerability of the WebAudio component in the Google Chrome web browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebAudio component in the Google Chrome web browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2018-1000423

An insufficiently protected credentials vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java, CrowdConfigurationService.java that allows attackers with local file system access to obtain the credentials used to connect to Crowd 2...

Description of the security update for Office 2016: January 8, 2019 (KB4461535)

None None...

Description of the security update for Outlook 2016: January 8, 2019

None None...

The vulnerability of Microsoft Excel editors arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Excel spreadsheet editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a local attacker to disclose protected information using a specially crafted file...