The vulnerability of the Suricata intrusion detection and prevention system, related to the use of memory after it is freed, allows an intruder to influence the integrity and accessibility of the protected information.

The vulnerability of the Suricata intrusion detection and prevention system lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to influence the integrity and accessibility of the protected information...

The vulnerability of the {conn,adv}_{min,max}_interval_set() function in the implementation of the HCI driver for Bluetooth in Linux operating systems allows a attacker to compromise the integrity of protected information and cause service failure.

The vulnerability of the conn,advmin,maxintervalset function in the implementation of the HCI driver for Bluetooth in Linux operating systems is related to competitive access to resources race conditions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the Suricata intrusion detection and prevention system, due to deficiencies in access control, allows intruders to influence the integrity of the protected information.

The vulnerability of the Suricata intrusion detection and prevention system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the `nft_setelem_catchall_deactivate()` function in the `net/netfilter/nf_tables_api.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby enhancing their privileges.

The vulnerability of the nftsetelemcatchalldeactivate function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the nft_verdict_init() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information, thereby enhancing their privileges.

The vulnerability of the nftverdictinit function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X remote control servers is related to the use of a non-trusted pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

maven: Block repositories using http by default

A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...

maven: Block repositories using http by default

A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...

CVE-2023-4639

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers allows a attacker to compromise the integrity of the protected information.

The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the SAP LT Replication Server, related to incorrect authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP LT Replication Server is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the Web Server component of the Oracle BI Publisher software, which is used for creating reports, allows a perpetrator to compromise data confidentiality and integrity.

The vulnerability of the Web Server component of the Oracle BI Publisher software exists due to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of data...

ROS-20230920-02

Vulnerability of slunpackloop function of mdssvc RPC service of Samba networking software package is related to execution of a loop with an inaccessible exit condition. Exploitation of the vulnerability allows an attacker, acting remotely, to cause a denial of service A vulnerability in the...

ROS-20230920-01

Vulnerability of winbinddpamauthcrap.c component of Samba networking software package is related to operation exceeding the buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service Vulnerability in SMB2 packet signing...

WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes

Description The plugin is vulnerable to Insecure Direct Object References IDOR in postid= parameter. Authenticated users are able to delete private notes associated with different user accounts. This poses a significant security risk as it violates the principle of least privilege and compromises...

The vulnerability of the raid5_cache_count() function (drivers/md/raid5.c) in the Linux kernel’s RAID driver allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information due to integer overflow.

The vulnerability of the raid5cachecount function drivers/md/raid5.c in the Linux kernel-based RAID driver is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CentOS 8 : rpm (CESA-2024:0647)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2024:0647 advisory. - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response ...