9318 matches found
The vulnerability of Cisco Email Security Appliance’s security systems allows attackers to bypass the installed filters on the device and compromise the integrity of the protected information.
The vulnerability of Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the installed filters on the device and compromise the integrity of the protected information through a specially crafted email...
The vulnerability of the lib/functions.php component in the Cacti network monitoring software allows a attacker to compromise data integrity or cause service failures.
The vulnerability of the lib/functions.php component of the Cacti network monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to compromise data integrity or cause service failures...
netty: HTTP request smuggling
A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...
The vulnerability of the Gem owner command in the RubyGems package management system, related to the output of API responses into the standard output stream, allows a hacker to compromise data integrity.
The vulnerability of the Gem owner command in the RubyGems package management system is related to the way API responses are printed to the standard output stream. Exploiting this vulnerability allows a remote attacker to compromise data integrity by using a specially crafted escape sequence...
The vulnerability of the Gem::GemcutterUtilities module in the RubyGems package management system, which relates to the issue of printing API responses into the standard output stream, allows a attacker to compromise data integrity.
The vulnerability of the Gem::GemcutterUtilities module in the RubyGems package management system relates to the way that API responses are printed into the standard output stream. Exploiting this vulnerability could allow a malicious actor to compromise data integrity by using a specially crafte...
The vulnerability of the uriComposeQuery function in the Uriparser parser, related to writing beyond the buffer memory limit, allows an attacker to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the uriComposeQuery function in the UriParser parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and...
The vulnerability of the AdminURLFieldWidget function in the Django web development framework relates to the lack of protective measures for website structure, allowing attackers to compromise data integrity.
The vulnerability of the AdminURLFieldWidget function in the Django web development framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...
The vulnerability of Samba software, related to access control errors, allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of Samba software is related to errors in access control. Exploiting this vulnerability can allow a perpetrator to compromise data integrity and cause service failures...
The vulnerability of the Gem::UserInteraction module in the RubyGems package management system allows a hacker to compromise data integrity.
The vulnerability of the Gem::UserInteraction module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor to compromise data integrity by using a specially crafted escape sequence...
The vulnerability of the Gem::CommandManage module in the RubyGems package management system, due to insufficient protection, allows an attacker to compromise data integrity.
The vulnerability of the Gem::CommandManage module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise data integrity by using a specially crafted escape sequence...
The vulnerability of the xenvif_set_hash_mapping function in Xen hypervisors allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the xenvifsethashmapping function in Xen hypervisors is related to integer overflow when processing requests to the netback driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and availability...
The vulnerability of Google Chrome’s browser, related to integer overflow, allows attackers to compromise data integrity.
The vulnerability of Google Chrome relates to a numerical overflow issue. Exploiting this vulnerability allows an attacker to compromise data integrity by using a specially crafted HTML page...
The vulnerability of Google Chrome browser, related to the insufficient implementation of content security policies, allows attackers to compromise data integrity.
The vulnerability of Google Chrome is related to the insufficient implementation of content security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension, allowing a malicious actor to compromise data integrity.
The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...
The vulnerability of the Samba package lies in the incorrect path limitation for the restricted access directory, allowing attackers to compromise the integrity and confidentiality of data.
The vulnerability of the Samba package is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and confidentiality of data...
The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox/Firefox ESR browsers allows a perpetrator to gain unauthorized access to information and compromise its integrity.
The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity...
New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users
A group of academics from Ruhr University Bochum and New York University Abu Dhabi have uncovered security flaws in 4G LTE and 5G networks that could potentially allow hackers to impersonate users on the network and even sign up for paid subscriptions on their behalf. The impersonation attack —...
Web exhibition PHP foreign trade enterprise website exists arbitrary file deletion vulnerability
NetShow PHP Foreign Trade Enterprise Website is a premium enterprise website template for small and medium-sized enterprises. Nethub PHP foreign trade enterprise website exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files, the integrit...
Arbitrary File Deletion Vulnerability in eyoucms
Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms there is an arbitrary file deletion vulnerability , an attacker can exploit the...
netty: HTTP request smuggling
A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...