The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of verification of the cryptographic signature. Exploiting this vulnerability can allow a perpetrator to disclose protected information using a specially crafted application...

The vulnerability of the API component of the Containous Traefik reverse proxy server allows attackers to disclose protected information.

The vulnerability of the Containous Traefik reverse proxy server’s API is related to implementation errors in the API. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created document or a specially...

The vulnerability of the Microsoft Office software arises from an operation that occurs outside the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created file...

The vulnerability of Microsoft Edge’s WebAudio library, which allows a hacker to disclose protected information

The vulnerability of Microsoft Edge’s WebAudio library is related to errors in processing audio requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Apache Sentry Unauthorized Access Vulnerability

Apache Sentry is an open source component for use in Hadoop clusters. An unauthorized access vulnerability exists in Apache Sentry, which allows remote attackers to submit a special request to delete partitioned data from a table protected by Sentry...

The vulnerability of the Integration Broker component in the PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Integration Broker component in the PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

The vulnerability of Medtronic MiniMed medical equipment, related to insufficient protection of transmitted information, allows a perpetrator to disclose protected information.

The vulnerability of Medtronic MiniMed 508, 522, 523, 523K, 551, 722, 723, 723K, and 751 medical devices lies in the transmission of protected information in an unencrypted form. Exploiting this vulnerability could allow an intruder to disclose protected information...

The vulnerability of Medtronic MyCareLink Patient Monitor’s medical equipment lies in the storage of passwords in a reversible format, which allows an intruder to disclose protected information.

The vulnerability of Medtronic MyCareLink Patient Monitor relates to the storage of passwords in a reversible format. Exploiting this vulnerability could allow an intruder to disclose protected information...

The vulnerability of the Core component of the Primavera Unifier application, which allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Core component of the Primavera Unifier application, which is used for automating project management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protecte...

The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to ga...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system, which allows a malicious actor to gain unauthorized access to protected data

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Script Author component in the scripting software for creating and processing scripts allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Script Author component in the scripting software for creating and processing scripts is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Crestron TSW-X60 and MC3

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Crestron Equipment: TSW-X60 and MC3 Vulnerabilities: OS Command Injections, Improper Access Control, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of these...

The vulnerability of Oracle Marketing’s User Interface component allows a hacker to gain unauthorized access to protected data.

The vulnerability of Oracle Marketing’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the User Interface component of the Trade Management business platform allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Microsoft Wireless Display Adapter 2 Command Injection / Broken Access Control

secuvera-SA-2018-03: Command Injection, Broken Access Control and Evil-Twin-Attack in Microsoft Wireless Display Adapter V2 - CVE-2018-8306 Affected Products: Microsoft Wireless Display Adapter V2: - Microsoft Wireless Display Adapter V2 Softwareversion 2.0.8350 to 2.0.8372 have been tested and a...

Chaturbate: Users may still able to view chat room panel of password protected rooms

The hacker found that the chat room panel could be accessed without the user having the room password. This was resolved. An attacker may able to view a password protected chat room panel by requesting the api endpoint for room panel. It discloses information depends on what app they use...