The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the Mediaserver component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the service/jni/comandroidserverwifiWifiNative.cpp function in the Android operating system’s Wi-Fi stack is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially creat...

The vulnerability of the Android operating system, which allows a hacker to access the backup data.

The vulnerability of the software interface of the Android operating system’s framework is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data backups through a specially created application...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Android operating system’s media server is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information...

The vulnerability of the Flash Player software allows attackers to obtain confidential information or circumvent existing access restrictions.

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions or obtain confidential information...

ownCloud/Nextcloud Unprotected Data Directory (HTTP)

ownCloud/Nextcloud is exposing an unprotected data directory. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

The vulnerability of the Microsoft .NET Framework software platform, which allows a perpetrator to gain access to protected information

The vulnerability of the Microsoft .NET Framework software platform is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information by using data in open text format within the client-server da...

The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to obtain confidential information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the lack of protection for operational data. Exploiting these vulnerabilities can allow a malicious...

The vulnerability of the Debian GNU/Linux operating system allows a perpetrator to read arbitrary files in the configuration directory.

The vulnerability in the xymond component of the Debian GNU/Linux operating system is related to the lack of protection for configuration data. Exploiting this vulnerability allows a malicious actor to read arbitrary files from the configuration directory using the “config” command...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the exchange/eas/EasAutoDiscover.java function in the implementation of the Autodiscover component of the Android operating system’s Exchange ActiveSync component is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious acto...

The vulnerability of the OpenSSL library, which allows a hacker to compromise RSA keys

The vulnerability of the MODEXPCTIMECOPYFROMPREBUF function crypto/bn/bnexp.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to extract RSA keys by running a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to bypass the KASLR security mechanism

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to bypass the KASLR protection mechanism through a specially crafted application...

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to gain access to information about the status of network connections.

The vulnerability of the Microprogramming Software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to information about the...

The vulnerability of the iOS operating system allows a perpetrator to gain access to sensitive information about ongoing payments.

The vulnerability of the Apple Pay component in the iOS operating system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, acting remotely, to gain access to sensitive information about ongoing payments by reviewing log files...

The vulnerability of the iOS operating system, which allows a hacker to gain access to iCloud accounts

The vulnerability of the CloudKit component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to an iCloud account through a specially crafted application...

The vulnerability of the Mac OS X operating system, which allows a hacker to read arbitrary notifications

The vulnerability of the Notification Center component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary notifications using a specially crafted application...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Moodle learning management system allows a hacker to gain access to user account data.

The vulnerability of the login/confirm.php sub-component of the Moodle learning management system is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user account information during attemp...

The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to gain access to the device.

The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the device...

PT-2007-3717 · Unknown · Script.Aculo.Us

Name of the Vulnerable Software and Affected Versions: Script.aculo.us affected versions not specified Description: The issue allows remote attackers to obtain data through a web page that retrieves the data using JavaScript Object Notation JSON without protection. This is achieved by capturing t...