Governance Considerations for Democratizing Your Organization's Data in 2021

With the continuing rise of IoT devices, mobile networks, and digital channels, companies face a lot of pressure to generate meaningful and actionable insights from the wealth of data they capture. Gartner Research lists data democratization as one of the top strategic technology trends to watch...

The vulnerability of the client API library for X Window System libX11, caused by a numerical overflow, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the client API library for the X Window System libX11 is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploitation of this vulnerability could allow an attacker operating remotely to compromise the confidentiality,...

The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the User Interface component of the Oracle SD-WAN Aware centralized management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the fs/xfs/xfs_super.c component in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the fs/xfs/xfssuper.c component in the Linux operating system is related to its use after release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of the Linux operating system’s kernel, related to writing beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the SQLite database management system’s ALTER TABLE instruction allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SQLite database management system’s ALTER TABLE command lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the _nc_find_entry function in the ncurses library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ncfindentry function in the ncurses library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the lavc_CopyPicture function in the VideoLAN VLC media player software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lavcCopyPicture function module/codec/avcodec/video.c in the Media Player VideoLAN VLC application is related to a buffer overflow vulnerability in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Cisco NX-OS operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Border Gateway Protocol BGP implementation in the Cisco NX-OS operating system is related to the use of pre-installed configuration data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of protected information...

The vulnerability of the autocmd function (window.c) in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the autocmd function window.c in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Apache Spark framework, related to deficiencies in the authentication process, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache Spark framework is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the SwizzleData function in browsers like Firefox and Firefox ESR, as well as in the Thunderbird email client, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SwizzleData function in browsers like Firefox and Firefox ESR, as well as in the Thunderbird email client, is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of UEFI (BIOS) software on HP workstations allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of UEFI BIOS software on HP workstations is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information, provided that the TPM module is disabled...

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems arises from the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of microprogramming software to the Trusted Platform Module (TPM) cryptographic processor, related to security configuration errors, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software against the Trusted Platform Module TPM cryptographic processor is related to security configuration errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

HPSBHF03587 rev. 1 - Information Disclosure Vulnerability in Storage Media in Systems with Intel® Optane™ Memory Module with Whole Disk Encryption

Potential Security Impact Some platforms configured with Whole Disk Encryption and an Intel® Optane™ memory module, may be at risk of data remaining unencrypted and potentially accessible under specific conditions. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILIT...