9441 matches found
Unspecified Vulnerability in Oracle Primavera Portfolio Management
Primavera Portfolio Management is a software solution for advising, planning, controlling and strategically analyzing your portfolio. A security vulnerability exists in the Investor Module component in Primavera Portfolio Management 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, 19.0.0. An attacker could...
New Highly-Critical SAP Bug Could Let Attackers Take Over Corporate Servers
SAP has patched a critical vulnerability impacting the LM Configuration Wizard component in NetWeaver Application Server AS Java platform, allowing an unauthenticated attacker to take control of SAP applications. The bug, dubbed RECON and tracked as CVE-2020-6287, is rated with a maximum CVSS sco...
Converting MBOX to Outlook Easily
Mail transfer is a common search query. Most commonly, users may migrate due to personal preferences, corporate policies, or support issues. Systems based on the MBOX format are tricky: you may easily export the files, but direct import to Outlook is impossible. That is unless you use the right...
The vulnerability of the PuTTY encryption protection tool lies in the use of a less secure encryption algorithm, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PuTTY encryption method lies in the use of a not sufficiently secure encryption algorithm. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the hdlr_dump function on the GPAC multimedia platform, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hdlrdump function on the GPAC multimedia platform relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the gf_media_avc_read_sps function on the GPAC multimedia platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gfmediaavcreadsps function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the gf_sm_load_init function on the GPAC multimedia platform, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gfsmloadinit function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the GPAC multimedia platform is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2020-6858 · Cpan +6 · Cpan +6
Name of the Vulnerable Software and Affected Versions: CPAN version 2.28 Description: The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access...
grafana: XSS via the OpenTSDB datasource
A flaw was found in grafana Tag value XSS via the OpenTSDB datasource are possible. The highest threat from this vulnerability is to data confidentiality and integrity...
kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c
A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...
The vulnerability in the cross-platform library LibVNCServer’s component libvncserver/scale.c allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability in the component libvncserver/scale.c of the cross-platform library LibVNCServer is due to a numerical overflow in pixelvalue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of Azure DevOps Server’s software development tools, related to the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Azure DevOps Server lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
jackson-databind: Serialization gadgets in ibatis-sqlmap
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
jackson-databind: Serialization gadgets in anteros-core
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...
grafana: XSS via the OpenTSDB datasource
A flaw was found in grafana Tag value XSS via the OpenTSDB datasource are possible. The highest threat from this vulnerability is to data confidentiality and integrity...
CVE-2020-15049
A flaw was found in squid. A trusted client is able to perform a request smuggling and poison the HTTP cache contents with crafted HTTPS request messages. This attack requires an upstream server to participate in the smuggling and generate the poison response sequence. The highest threat from thi...
The vulnerabilities of the functions rx_queue_add_kobject() and netdev_queue_add_kobject() (net/core/net-sysfs.c) in the Linux kernel allow attackers to compromise data integrity.
The vulnerability of the functions rxqueueaddkobject and netdevqueueaddkobject net/core/net-sysfs.c in the Linux kernel is related to errors in pointer counting in the networking subsystem. Exploiting this vulnerability could allow an attacker to compromise data integrity...