The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Alternate Services component in the Firefox web browser, related to integer overflow, allows an attacker to compromise data integrity.

The vulnerability of the Alternative Services component in the Firefox web browser is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to an improper limitation on the visible layers of the user interface, allowing a malicious actor to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird arises from incorrect handling of symbolic links before accessing a file, allowing an attacker to compromise data integrity.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to an incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of function R7WebsSecurityHandler (/goform/execCommand) in the Tenda AC8 router’s microprogramming system, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2024-3534 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.6.2722 build 20240402 QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: The issue is caused by a buffer copy without checking the size of the input, which may allow authenticated users to execute co...

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromRouteStatic function in the microprogramming software for Tenda F1202, FH1202, AC7, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of Varnish cache servers, related to the manipulation of requests on the server side, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Varnish cache server relates to the manipulation of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of the protected information through a specially crafted HTTP request...

Oracle Linux 8 : shim (ELSA-2024-1902)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1902 advisory. 15.8-4.0.1 - Add support for Oracle signed shim Orabug: 36540084 - Add shim binaries signed with Oracle Secure Boot Signing key 1 Orabug: 36540084...

The vulnerability of the fromP2pListFilter function in the microprogramming software for Tenda routers, F1202, FH1202, PA202, and PW201A, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromP2pListFilter function in the microprogramming software for Tenda F1202, FH1202, PA202, and PW201A routers is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability can allow an attacker to compromise the...

GHSA-828R-R2C8-RFW3 Privilege Escalation in kubevirt

A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances VMIs can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privileges of the VM process on the host system. In worst-case scenarios an attacker can read and modify any...

The vulnerability of SAP Asset Accounting software for asset management and accounting involves incorrect restrictions on path names in the catalog, allowing attackers to manipulate the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP Asset Accounting software for asset management and accounting is related to incorrect restrictions on the path to the catalog. Exploitation of this vulnerability can allow a malicious actor to influence the confidentiality, integrity, and accessibility of protected...

The vulnerability of the read_file_dentry_set function in the user space utility exfatprogs allows a attacker to compromise data integrity.

The vulnerability of the readfiledentryset function in the user-space utility exfatprogs is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the Routing Engine module in Juniper Networks Junos OS networking devices of the EX4300 series allows a attacker to compromise the integrity of protected information.

The vulnerability of the Routing Engine RE module in Juniper Networks’ Junos OS networking devices of the EX4300 series is related to the incorrect implementation of the sequence of actions when using a firewall filter for IPv6 packet reception. Exploiting this vulnerability can allow an attacker...

PT-2024-5137

Name of the Vulnerable Software and Affected Versions: Node.js affected versions not specified Description: The issue is related to the Permission Model in Node.js, which incorrectly assumes that any path starting with two backslashes has a four-character prefix that can be ignored. This subtle b...

The vulnerability of the User Admin Application component of the SAP NetWeaver AS for Java software, used for creating and deploying web applications, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the User Admin Application component in the SAP NetWeaver AS for Java software for creating and deploying web applications is related to improper cleaning during exception handling. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...

The vulnerability of the Confluence Data Center arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Confluence Data Center exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the “Enter Package Data” component of the SAP Group Reporting Data Collection software allows a perpetrator to enhance their privileges and compromise the integrity of the data.

The vulnerability of the “Enter Package Data” component in the SAP Group Reporting Data Collection software relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely and compromise the integrity of data...

NewStart CGSL CORE 5.04 / MAIN 5.04 : rpm Vulnerability (NS-SA-2024-0010)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rpm packages installed that are affected by a vulnerability: - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seeming...