The vulnerability of Google Chrome’s browser loading policies, related to the lack of standard permission mechanisms, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s browser loading policy is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially created HTML page...

The vulnerability of Google Chrome’s navigation system, which allows a perpetrator to compromise data integrity

The vulnerability of Google Chrome’s navigation system is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to influence data integrity through a specially created HTML page...

The vulnerability of the security mechanism for executing macros in the LibreOffice office software package allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the security mechanism for executing macros in the LibreOffice office software package is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Google Chrome browser’s media router component allows a hacker to compromise data integrity.

The vulnerability of the Google Chrome browser’s media router component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability in the full-screen mode of the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

PT-2020-6426 · Ckeditor +1 · Ckeditor +1

Name of the Vulnerable Software and Affected Versions: CiviCRM versions prior to 5.28.1 CiviCRM ESR versions prior to 5.27.5 ESR Description: The issue is related to the CKEditor configuration form in CiviCRM, which allows Cross-Site Request Forgery CSRF. This could potentially allow a remote...

nodejs-lodash: prototype pollution in zipObjectDeep function

A flaw was found in nodejs-lodash in versions 4.17.15 and earlier. A prototype pollution attack is possible which can lead to arbitrary code execution. The primary threat from this vulnerability is to data integrity and system availability...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

CloudForms: Out-of-band OS Command Injection through conversion host

An out-of-band OS command injection vulnerability was found in Red Hat CloudForms. An authenticated malicious attacker could execute arbitrary commands on the server by sending a specially crafted request. The highest threat from this vulnerability is to data confidentiality and integrity as well...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

The vulnerability of Google Chrome’s exchange buffer, related to deficiencies in the protection measures for web page structures, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Exchange Buffer is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of Google Chrome’s URL formatting mechanism allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s URL formatting mechanism is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created domain name...

The vulnerability of the Omnibox component in the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the Omnibox component in Google Chrome relates to the lack of a standard permission mechanism. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of trusted browser types like Google Chrome allows attackers to compromise data integrity.

The vulnerability of the trusted browser types Google Chrome is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developer tools is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker who operates remotely to access confidential data, compromise its integrity, and even cause service failures through a...

The vulnerability of trusted browser types like Google Chrome, due to the lack of standard permission mechanisms, allows attackers to compromise data integrity.

The vulnerability of the trusted browser types Google Chrome is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

The vulnerability of the fly-fm file manager lies in the fact that resources are not released after their useful period has ended. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...

The vulnerability of the LibreOffice office suite lies in its improper validation of input data, which allows an attacker to compromise the integrity of the data.

The vulnerability of the LibreOffice office suite is related to a form field that might contain a URL pointing to an external server. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...