The vulnerability of the Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort functions in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Exectimetracker::getloops/Filesorttracker::reportuse/filesort functions in the MariaDB database management system is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to compromise the...

The vulnerability of the del_typebuf() function in the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the deltypebuf function in the Vim text editor is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the ins_bytes() function in the Vim text editor allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

NVIDIA NVFLARE 代码问题漏洞

NVIDIA NVFLARE is a standalone Python library from NVIDIA, Inc. Designed to support joint learning between parties using their local secure protected data for client-side training, it also includes functionality for coordinating and exchanging the progress of results across all sites to achieve...

The vulnerability of the NVIDIA GPU Display Driver at the ECC level, related to writing beyond the buffer in memory, allows a hacker to cause a system failure and compromise data integrity.

The vulnerability of the NVIDIA GPU Display Driver at the ECC level is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure and compromise data integrity...

GSD-2022-1003239 ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state

ext4: filter out EXT4FCREPLAY from on-disk superblock field sstate This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

pacemaker enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

The vulnerability of many protocols in the Ovation distributed system management framework stems from deficiencies in the authentication process. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many protocols in the Ovation distributed system management framework is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service...

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the built-in formats of Ovation OCR400 and Ovation OCR1100 is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the CMPLink/TCP protocol implementation in the microprogramming software for programmable logic controllers TOYOPUC allows a hacker to execute arbitrary code.

The vulnerability of the CMPLink/TCP protocol implementation in the microprogramming software for programmable logic controllers TOYOPUC is related to insufficient verification of data authenticity. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the Java Runtime Environment software lies in the lack of measures taken to eliminate scipt-related tags on web pages, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Java Runtime Environment software relates to the failure to remove scipt-related tags from web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability in the set of tools provided by Google Chrome and Microsoft Edge browsers allows a perpetrator to compromise data integrity.

The vulnerability of the DevTools set of tools for Google Chrome and Microsoft Edge is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker operating remotely to compromise data integrity...

The vulnerabilities of microprogrammed software in programmable logic controllers such as ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 350 PCI ETH are related to authentication process flaws. These flaws allow attackers to gain unauthorized access to protected information or compromise the integrity of that information.

The vulnerabilities of the microprogrammed logic controllers ILC 1x0, ILC 1x1, ILC 1x1 GSM/GPRS, ILC 3xx, AXC 1050, AXC 1050 XC, AXC 3050, RFC 480S PN 4TX, RFC 470 PN 3TX, RFC 470S PN 3TX, RFC 460R PN 3TX, RFC 460R PN 3TX-S, RFC 430 ETH-IB, RFC 450 ETH-IB, PC WORX SRT, PC WORX RT BASIC, and FC 35...

The vulnerability of the streamGetEdgeID function in the Redis database management system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the streamGetEdgeID function in the Redis database management system is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, allows a malicious individual to gain unauthorized access to protected information or compromise data integrity.

The vulnerability of the Accounts sub-component of the Oracle iSupplier Portal, a component of the Oracle E-Business Suite, exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Oracle Database - Enterprise Edition component of the Oracle Database Server database management system allows a perpetrator to compromise the integrity of data.

The vulnerability of the Oracle Database - Enterprise Edition component of the Oracle Database Server system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

PT-2022-5194 · Dell · Cloud Mobility For Dell Emc Storage

Name of the Vulnerable Software and Affected Versions: Cloud Mobility for Dell Storage versions 1.3.0 and earlier Description: The issue is related to improper authorization in the system, which can allow an attacker to access protected information. A threat actor with root-level access to either...

The vulnerability of the Notification Configuration component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of that data.

The vulnerability of the Notification Configuration component in the Oracle PeopleSoft Enterprise PeopleTools business application exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

httpd: mod_proxy NULL pointer dereference

A flaw was found In Apache httpd. The modproxy has a NULL pointer dereference. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

grub2: Out-of-bound write when handling split HTTP headers

A flaw was found in grub2 when handling split HTTP headers. While processing a split HTTP header, grub2 wrongly advances its control pointer to the internal buffer by one position, which can lead to an out-of-bounds write. This flaw allows an attacker to leverage this issue by crafting a maliciou...