9559 matches found
CVE-2022-28733
A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the packet data may be smaller than the size needed. This issue causes an out-of-bands wri...
HUAWEI HarmonyOS 安全漏洞
HUAWEI HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A security vulnerability exists in HUAWEI HarmonyOS 2.0, which stems from a post-lock pop-up box issue in the operator's custom USSD service, and could be exploited by an...
The vulnerability of the lrzip.c component: the initialise_control function of the Irzip software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the lrzip.c component, specifically the initialisecontrol function of the Irzip software, arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
puppet: unsafe HTTP redirect
An exposure flaw was found in Puppet Agent and Puppet Server where HTTP credentials were leaked. When the HTTP redirects occurred, the authentication and cookie header was added when following redirects to a different host. This flaw allows an unauthorized network attacker to access sensitive...
CVE-2019-14884
A vulnerability was found in moodle. A reflected XSS is possible from some fatal error messages. The highest threat from this vulnerability is to data confidentiality and integrity...
CVE-2020-1692
A flaw was found in moodle. Users' web service tokens could be exposed to other users enrolled in the same course, who have the ability to share HTML content. The highest threat from this vulnerability is to data confidentiality and integrity...
CVE-2022-1343
A flaw was found in OpenSSL's Online Certificate Status Protocol OCSP response functionality in the signer certificate verification routines. This flaw could result in a linked application falsely believing that an x.509 Digital Certificate is either "good" or "unknown" when revoked and requires...
PT-2022-6790 · Gstreamer +8 · Gstreamer +8
Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is related to an integer overflow in the matroskademux element in the bzip decompression function, which can cause a segfault or potentially a heap overwrite, depending on the...
The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication mechanism. This allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...
GHSA-GC43-G62C-99G2 Improper Access Control in MySQL Connectors Java
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J...
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to establish access...
CVE-2020-9547
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-10968
A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following...
CVE-2020-10672
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-11619
A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, we...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...