CVE-2021-29266

A flaw was found in the Linux kernel. An invalid value upon reopening a character device can cause a use-after-free memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2021-29264

A flaw was found in the Linux kernel. The Freescale Gianfar Ethernet driver allows attackers to cause a system crash due to a negative fragment size calculated in situations involving an RX queue overrun when jumbo packets are used and NAPI is enabled. The highest threat from this vulnerability i...

The vulnerability of the is_protected_meta function in the wp-includes/meta.php component of the WordPress content management system, related to improper access control, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the isprotectedmeta function in the wp-includes/meta.php component of the WordPress content management system is related to an incorrect definition of meta-key protection. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause servi...

The vulnerability of the WordPress website content management system, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the wp-includes/Requests/Utility/FilteredIterator.php component of the WordPress content management system, related to the restoration of unreliable data structures in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the wp-includes/Requests/Utility/FilteredIterator.php component of the WordPress content management system is related to incorrect handling of serialization requests. Exploiting this vulnerability can allow a malicious actor to access sensitive data, compromise its integrity,...

The vulnerability of the evolution-data-server database server, related to insufficient neutralization of special elements in queries, allows attackers to compromise data integrity.

The vulnerability of the evolution-data-server database server is related to a STARTTLS framing error, which can affect SMTP and POP3 protocols. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the software package that implements the Squid caching proxy server’s function relates to incorrect elimination of certain elements in the output data. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software package that implements the Squid caching proxy server lies in the improper elimination of certain elements in the output data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

The vulnerability of the linkref_addindex function in the rcube_string_replacer.php component of the Roundcube webmail client allows a attacker to compromise the integrity of data, due to deficiencies in the security measures used to protect web page structures.

The vulnerability of the linkrefaddindex function in the Roundcube email client’s rcubestringreplacer.php component is related to the lack of content validation for links. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of a mechanism for checking input data, allows a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the data...

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

The vulnerability of the Blink rendering module in Google Chrome browsers, related to the improper assignment of permissions for critical resources, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

The vulnerability of the WordPress website content management system lies in the lack of a mechanism for managing privileges. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WordPress website content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the BlockLogFormatter.php component of the MediaWiki software environment, related to the shortcomings in the security measures for handling web page structures, allows attackers to compromise the integrity of data.

The vulnerability of the BlockLogFormatter.php component of the MediaWiki software, which is used to implement the hypertext environment, is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability relates to the implementation of WebRTC in Google Chrome, Firefox, Firefox-ESR web browsers, and Thunderbird email client. It involves buffer overflow attacks, allowing attackers to compromise data integrity.

The vulnerability in WebRTC implementations of Google Chrome, Firefox, Firefox-ESR, and the Thunderbird email client is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

The vulnerability in the `emitEntryFromArchiveEntry` function in the `libarchiveplugin.cpp` of the Ark archiver, related to incorrect definition of references before accessing the file, allows a attacker to compromise data integrity.

The vulnerability in the emitEntryFromArchiveEntry function in the libarchiveplugin.cpp of the Ark archiver is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow a remote attacker to compromise data integrity through a speciall...

The vulnerability of the GPU Display Driver’s graphical driver API involves unsafe management of privileges, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GPU Display Driver’s graphics driver API is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the ATS negative cache in the Apache Traffic Server web server, related to a lack of interpretation of HTTP requests, allows attackers to compromise data integrity.

The vulnerability of the ATS negative cache in the Apache Traffic Server web server is related to a deficiency in HTTP request interpretation. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of the xbean-reflect/JNDI library component from Jackson-databind allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xbean-reflect/JNDI library component related to Jackson-databind involves the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the software for managing IT services and intelligent monitoring in IBM Application Performance Management (APM) arises from the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to compromise data integrity.

The vulnerability of the software for managing IT services and intelligent monitoring in IBM Application Performance Management exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to affect data integrity by sending...