The vulnerability of the shell command line interface in IPython’s interactive computing environment allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the InnoDB component in the MariaDB database allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the InnoDB component in the MariaDB database relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

DEBIAN-CVE-2022-28199

NVIDIA’s distribution of the Data Plane Development Kit MLNXDPDK contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a remote attacker to cause denial of service and some impact to data integrity and confidentiality...

UBUNTU-CVE-2021-3521

There is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary key via a "binding signature." RPM does not check the binding signature of subkeys prior to importing them. If an attacker is able to add or socially engineer another party to add a malicious subkey to...

CVE-2022-31609

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...

CVE-2022-31609

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...

PT-2022-4256 · Western Digital · Western Digital My Cloud Web App

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Web App affected versions not specified Description: The issue is related to the use of a weak SSLContext in the Western Digital My Cloud Web App when configuring port forwarding rules. This weakness is due to the use...

CVE-2022-32248

Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could insert or edit the value of an existing field in the database. This leads to an impact on the integrity of the data...

The vulnerability of the `ecdsa_verify_[prepare_]legacy()` command-line tool for ECDSA elliptic curve cryptography, provided by `ecdsautils`, allows a perpetrator to compromise data integrity.

The vulnerability of the ecdsaverifypreparelegacy command-line tool for ECDSA elliptic curve cryptography, provided by ecdsautils, is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of data...

The vulnerability in the libImaging/TgaRleDecode.c component of the Pillow image processing library allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libImaging/TgaRleDecode.c component of the Pillow image processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

PT-2022-9731 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU, which may allow an IO device ...

AMD EPYC 安全漏洞

AMD EPYC is an x86 server microprocessor product line from AMD, known as "Xiao Long" in Chinese, which utilizes the Zen microarchitecture. A security vulnerability exists in AMD EPYC UApp/ABL. The vulnerability can be exploited by an attacker to corrupt arbitrary memory by bootloading a program,...

The vulnerability of the Display Key Combination Switches in the Wayland server display protocol implementation allows a hacker to compromise data integrity or cause service failures.

The vulnerability of the Display Key Combination Demon in the Wayland display protocol implementation relates to the ability to save the PID of a process in the /tmp/swhks.pid file and incorporate the PID of an existing process into it. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of Puppet’s infrastructure automation tool lies in the absence of a mechanism to neutralize elements in CSV files. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Puppet infrastructure automation tool relates to the absence of a mechanism for neutralizing elements in the CSV file. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2022-6475 · Sox +4 · Sox +4

Name of the Vulnerable Software and Affected Versions: SoX versions 14.4.2 and earlier Description: The issue is related to a heap-based buffer overflow in the start read function of the Sound Exchange libsox. This can be triggered by a specially-crafted file, potentially allowing a remote attack...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication procedures, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

Vulnerability of the API component: A software platform in Node.js that allows attackers to compromise data integrity

The vulnerability of the API component in the Node.js software platform is related to insufficient checking of the rejectUnauthorized value. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerabilities in the components reports_admin.php, data_queries.php, data_input.php, graph_templates.php, graphs.php, reports_admin.php, and data_input.php of the Cacti network monitoring software allow a attacker to compromise the integrity of the data.

The vulnerability of the components reportsadmin.php, dataqueries.php, datainput.php, graphtemplates.php, graphs.php, reportsadmin.php, and datainput.php of the Cacti network monitoring software is related to the lack of security measures for the website structure. Exploiting this vulnerability...

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Sample apps component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...