The vulnerability of the class-wp-rest-posts-controller function in the WordPress content management system, related to insecure privilege management, allows attackers to compromise data integrity.

The vulnerability of the class-wp-rest-posts-controller function in the WordPress content management system is related to an authentication error that allowed users to mark messages as fixed through the REST API. Exploiting this vulnerability could enable a malicious actor to compromise data...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to an XSS attack that allows JavaScript to be injected into the STYLE code. Exploiting this vulnerability could enable a malicious actor to compromise the integrity of the data...

The vulnerability of the HelloRetryRequest extension in the Firefox browser allows a perpetrator to compromise data integrity.

The vulnerability of the HelloRetryRequest extension in the Firefox browser is related to an error in packet sending. In this error, the client may negotiate a protocol that is lower in level than TLS 1.3. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the Apache SpamAssassin spam filtering software lies in its lack of mechanisms for controlling the resources used. This allows attackers to compromise the integrity of the data.

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of mechanisms for controlling the resources used. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

The vulnerability of the Apache Tomcat application server’s JMX component stems from a lack of protection mechanisms for registration data. This allows attackers to gain unauthorized access to confidential information, cause service failures, and compromise data integrity.

The vulnerability of the Apache Tomcat application server’s JMX component is related to the lack of a mechanism to protect registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of...

The vulnerability of the wp_targeted_link_rel() function in the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the wptargetedlinkrel function in the WordPress content management system is related to a storage-related error in the script. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

CVE-2020-12654

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability. Mitigation In order to...

squid: improper check for new member in ESIExpression::Evaluate allows for stack buffer overflow

A flaw was found in Squid through version 4.7. When handling the tag esi:when, when ESI is enabled, Squid calls the ESIExpression::Evaluate function which uses a fixed stack buffer to hold the expression. While processing the expression, there is no check to ensure that the stack won't overflow...

Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8

Memory safety flaws were found in Mozilla Firefox and Thunderbird. Memory corruption that an attacker could leverage with enough effort, could allow arbitrary code to run. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

usrsctp: Buffer overflow in AUTH chunk input validation

A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memory corruption and an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

usrsctp: Buffer overflow in AUTH chunk input validation

A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memory corruption and an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

CVE-2020-12387

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

CVE-2019-15794

A flaw was found in the Linux kernel. In Overlayfs, vma-vmfile was replaced in the mmap handlers and, on errors, the original value is not restored. A local attacker with special user privilege or root can cause a kernel internal information leak. The highest threat from this vulnerability is to...

CVE-2019-10785

A flaw was found in dojox. Cross-site scripting is possible as only the first occurrence of each character is encoded. The highest threat from this vulnerability is to data confidentiality and integrity...

PT-2020-6199 · Json-C +10 · Json-C +10

Name of the Vulnerable Software and Affected Versions: json-c versions 0.14 and earlier Description: The issue is related to an integer overflow and out-of-bounds write in json-c, which can be triggered by a large JSON file. This can be demonstrated by the printbuf memappend function. The...

CVE-2020-0030

A race condition leading to a use-after-free memory flaw was found in the Linux kernel. This could lead to a local escalation of privileges with no additional execution privileges required. For this particular vulnerability, no user interaction is needed. The highest threat from this vulnerabilit...

chromium-browser: Use after free in task scheduling

A flaw was found in the Chromium browser. The task scheduling component was found to have a use-after-free memory flaw. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...