The vulnerability of the filesystem.renamer() function in the SABnzbd news reader software, which is related to errors in handling relative pathnames for directories, allows attackers to compromise data integrity.

The vulnerability of the filesystem.renamer function in the SABnzbd news reader program is related to errors in handling relative pathnames for directories. Exploiting this vulnerability could allow a malicious actor to manipulate data integrity through the use of a malicious PAR2 file...

PT-2021-8093 · Samba +8 · Samba +8

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource due to incorrect metadata handling. This allows an authenticated attacker with permissions to read or modify sha...

The vulnerability of the Drupal CMS system’s kernel, related to improper authentication, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Drupal CMS system’s kernel is related to incorrect authorization when read-only mode is set to FALSE via jsonapisettings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the CKEditor configuration form in the CiviCRM interaction and connection management web system allows a perpetrator to compromise data integrity by manipulating cross-site requests.

The vulnerability of the CKEditor configuration form in the CiviCRM interaction and connection management web system is related to the falsification of cross-site requests. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

The vulnerability of the isotp_setsockopt function in the net/can/isotp.c component of the Linux kernel, which relates to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the isotpsetsockopt function in the net/can/isotp.c component of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the RSS/Atom/Pie LibGRSS library, related to errors in the authentication process for certificates, allows attackers to compromise the integrity of data.

The vulnerability of the RSS/Atom/Pie LibGRSS library is related to errors in the TLS certificate validation process when loading streams. This occurs due to a standard behavior of the SoupSessionSync library. Exploiting this vulnerability could allow an attacker to compromise the integrity of da...

The vulnerability of the Roundcube email client installer’s SMTP configuration, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the Roundcube email client installer’s SMTP configuration is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

The vulnerability of the Redis database management system, related to buffer overflows in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Redis database management system is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures using the STRALGO LCS command...

The vulnerability of the Drupal CMS system’s kernel, related to insufficient validation of input data, allows attackers to access confidential information and compromise its integrity.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created link...

The vulnerability of the Roundcube email client installation database, related to the lack of security measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Roundcube email client’s host and user database installation is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerability of the Nim programming language lies in errors related to the authentication process for certificates. This allows attackers to compromise the integrity of data.

The vulnerability of the Nim programming language lies in the fact that the checking of the httpClient SSL/TLS certificate is disabled by default. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

The vulnerability of the Dependency Proxy component of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Dependency Proxy component in the Git-based software platform for collaborative code development on GitLab is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab relates to errors in the certificate validation process, which allows attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from incorrect session expiration times. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient password verification with expired passwords. Exploiting this vulnerability can allow a malicious actor, operating remotely, to access confidential data and compromise its...

The vulnerability of Nomad application orchestrators, related to the false representation of critical information to the user interface, allows attackers to compromise data integrity.

The vulnerability of Nomad application orchestrators is related to a network bridge mode error. Exploiting this vulnerability allows an attacker operating remotely to compromise data integrity...

The vulnerability of the gray_split_cubic function in the Rlottie animation-generation library, related to buffer-out writing, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...

The vulnerability of TheFuck programming language package, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity and cause service failures.

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...

The vulnerability of the index.php/appointment/insert_patient_add_appointment component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/insertpatientaddappointment component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity ...

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...