PT-2024-19958 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: An SQL injection issue exists in an undisclosed page of the BIG-IP Configuration utility. The exact nature of the issue and its potential impact are not fully detailed, but it suggests a...

The vulnerability of the JavaFX component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to compromise the integrity of protected information.

The vulnerability of the JavaFX component of Oracle Java SE and the Oracle GraalVM Enterprise Edition platform exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

WordPress Plugin SpeedyCache Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

CVE-2021-46758

Insufficient validation of SPI flash addresses in the ASP AMD Secure Processor bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity...

The vulnerability of the httplib2 component from the Python-httplib2 library allows attackers to compromise data integrity.

The vulnerability of the httplib2 component in the Python-httplib2 library is related to the lack of measures taken to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise data integrity...

PT-2023-9663

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 macOS Sonoma versions prior to 14.1 Description The issue is related to an inconsistent user interface that was...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos routers of the MX and SRX series allows attackers to compromise the integrity of protected information.

The vulnerability of SIP application-level ALG operating systems running on Juniper Networks Junos routers of the MX and SRX series lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

OpenJDK: IOR deserialization issue in CORBA (8303384)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows...

Medium: ruby

Issue Overview: A flaw was found in the way the Ruby REXML library parsed XML documents. Parsing a specially crafted XML document using REXML and writing parsed data back to a new XML document results in creating a document with a different structure. This issue could affect the integrity of...

The vulnerability of the Keycloak identity and access management software lies in errors during the certificate verification process, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Keycloak identity and access management software is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerabilities of the federation components and the RabbitMQ messaging broker allow attackers to compromise data integrity.

The vulnerability of the federation components and the RabbitMQ messaging broker components is related to the improper implementation of user input processing. Exploiting this vulnerability allows an attacker to compromise data integrity...

Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, stem from insufficient checking of unusual or exceptional states, allowing attackers to exploit these vulnerabilities to compromise data integrity.

The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient checking of unusual or exceptional states. Exploiting these vulnerabilities can allow a remote attacker to compromise data integrity...

PT-2023-5744 · WordPress · Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: Comments Like Dislike plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to a missing capability check on the restore settings function, which can be exploited via an AJAX action. This allows...

The vulnerability of the tap_open() function in the drivers/net/tap.c module of the Linux kernel’s TUN/TAP driver allows a attacker to compromise data integrity or gain elevated privileges.

The vulnerability of the tapopen function in the drivers/net/tap.c module of the Linux TUN/TAP driver is related to incorrect initialization of the UID. Exploiting this vulnerability could allow an attacker to compromise data integrity or increase their privileges...

PT-2023-6779 · Аврора · Аврора

Name of the Vulnerable Software and Affected Versions: Аврора affected versions not specified Description: The issue is related to a flaw in the notification mechanism of the Аврора operating system, specifically concerning insufficient permission control for applications sending notifications...

The vulnerability of the cross-platform software development framework Qt, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.

The vulnerability of the cross-platform software development framework Qt is related to the transfer of protected information in unencrypted form. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the microprogramming software for WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data.

The vulnerability of the microprogramming software used in WAGO CC100 programmable logic controllers and the microprogramming software for WAGO Touch Panel 600 sensors is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to gain access to...

The vulnerability in the ext4_group_desc_csum() function of the Linux operating system’s file system driver allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s ext4 file system driver relates to the use of a dedicated buffer for memory management outside the scope in the function ext4groupdesccsum within the fs/ext4/super.c module. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2023-2935 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.6.0 through 5.9.2 Description: The issue is related to an operation restriction bypass vulnerability in the Message and Bulletin components of Cybozu Garoon. This vulnerability is associated with weaknesses in the...

CVE-2023-32112

Vendor Master Hierarchy - versions SAPAPPL 500, SAPAPPL 600, SAPAPPL 602, SAPAPPL 603, SAPAPPL 604, SAPAPPL 605, SAPAPPL 606, SAPAPPL 616, SAPAPPL 617, SAPAPPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lea...