The vulnerability of the Node.js module for processing tar archives, Node-tar, is related to shortcomings in pathname restrictions for directories. This allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Node.js module for processing tar archives with the Node-tar module is related to the possibility of bypassing the symbolic link checks for directories. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

Vulnerability of XML format conversion software in xmlgraphics-commons, due to insufficient validation of input data, allows attackers to access confidential information and compromise its integrity.

The vulnerability of XML format conversion software in xmlgraphics-commons is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of elements in iframe modules for web page rendering in WebKitGTK and WPE WebKit allows attackers to exploit it to compromise the integrity of web page data. This vulnerability is related to the lack of protection for the structure of web pages.

The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...

openSUSE 15 Security Update : python39-pip (openSUSE-SU-2022:0064-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0064-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to...

SUSE SLED15 / SLES15 Security Update : python39-pip (SUSE-SU-2022:0064-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0064-1 advisory. - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references bsc1186819. Tenable has extracted the...

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

Design/Logic Flaw

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

The vulnerability of the fr-archive-libarchive.c component in the File Roller archiver program allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the fr-archive-libarchive.c component of the File Roller archiver program is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a attacker to compromise the integrity and accessibility of the protected...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...

EulerOS Virtualization 3.0.2.6 : rpm (EulerOS-SA-2021-2876)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

EulerOS Virtualization 3.0.2.6 : samba (EulerOS-SA-2021-2883)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN...

Huawei HarmonyO SeID module out-of-bounds memory write vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...

haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled

haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it's possible to drop the Host header and use the authority only after forwarding to a second http2 layer, possibly causing two differing values of Host at a different stage. The highest threat...

The vulnerability of the sequelize.json() ORM library for applications like Sequelize allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sequelize.json ORM library for applications like Sequelize is related to the lack of protection for SQL query structures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...