Vulnerability of the print-rsvp.c:rsvp_obj_print() utility for capturing and analyzing network traffic with tcpdump: This utility allows a intruder to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-rsvp.c:rsvpobjprint utility for capturing and analyzing network traffic using tcpdump is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information and compromise...

Vulnerability in the print-isakmp.c function: The print() utility for capturing and analyzing network traffic via tcpdump allows a hacker to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-isakmp.c file, specifically the function ikev1nprint, related to the tcpdump tool for capturing and analyzing network traffic, involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized...

CVE-2019-17563

It was found that tomcat's FORM authentication allowed a very small period in which an attacker could possibly force a victim to use a valid user session, or Session Fixation. While practical exploit of this issue is deemed highly improbable, an abundance of caution merits it be considered a flaw...

CVE-2019-18391

A heap-based buffer overflow flaw was found in virglrenderer. The vrendrenderertransferwriteiov function allows guest OS users to cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

The vulnerability in Linux kernel, related to buffer overflows in virtual memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability in Linux kernels is related to buffer overflows in virtual memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...

The vulnerability of the client’s /roster/module.val module for instant messaging between dinosaurs, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the /roster/module.vala client for instant messaging in Dino involves insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

The vulnerability of the S Pip content management system, related to incorrect authorization, allows a violator to compromise data integrity.

The vulnerability of the Scribunto content management system is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the data integrity...

The vulnerability of the client’s /xep/0313_message_archive_management.vala module for instant messaging between dino users, related to insufficient input data validation, allows a perpetrator to compromise the integrity of the data.

The vulnerability of the client’s /xep/0313messagearchivemanagement.vala module for instant messaging between dino users is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

Support Statement - Object Storage Gateway Software

Object Storage Offloading Third-Party Object Storage Offloading Software These third-party applications are designed to help upload files to cloud storage. What is Supported Third-party object storage gateway software is only supported if all backup data written to the repository by Veeam Backup ...

Vulnerability of the print-ldp.c:ldp_tlv_print() utility in tcpdump: a tool for capturing and analyzing network traffic. This vulnerability allows an attacker to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability in the print-ldp.c function, specifically ldptlvprint, a utility for capturing and analyzing network traffic using tcpdump, relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

The vulnerability of the S Pip content management system lies in the redirection of URLs to unreliable websites, allowing attackers to compromise data integrity.

The vulnerability of the Scribunto content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the data...

The vulnerability of the Go programming package lies in its inconsistent interpretation of http requests, which allows an attacker to compromise data integrity.

The vulnerability of the Go software package is related to inconsistent interpretation of http requests. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the S Pip content management system lies in the lack of measures taken to protect the website structure, allowing attackers to compromise the integrity of the data.

The vulnerability of the Scribunto content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the setusercontext() function in the doas utility allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the setusercontext function in the doas utility exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the protected information...

The vulnerability of the Password Recovery component in Zyxel router microprogramming software of the GS1900 series allows a intruder to influence the integrity of the protected information.

The vulnerability of the Password Recovery component in Zyxel router microprogramming systems of the GS1900 series exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected informati...

The vulnerability of the recv_files and read_ndx_and attrs functions in the rsync daemon allows a hacker to circumvent existing access restrictions and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of rsync exists due to the lack of checks on the filenames fnamecmp in the daemonfilterlist data structure in the recvfiles function in receiver.c, and the absence of a sanitizepaths mechanism for paths found in the “xname follows” strings in the readndxand attrs function in...

The vulnerability in the print-vrrp.c:vrrp_print() function of the tcpdump utility for capturing and analyzing network traffic allows a perpetrator to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the print-vrrp.c:vrrpprint function in the tcpdump utility for capturing and analyzing network traffic is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and...

The vulnerability of the /xep/0280_message_carbons.vala client module for exchanging instant messages with dino, related to insufficient validation of input data, allows a perpetrator to compromise the integrity of the data.

The vulnerability of the /xep/0280messagecarbons.vala module of the instant messaging client dino is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

CVE-2019-19530

A use-after-free flaw was found in the acmprobe USB subsystem in the Linux kernel. A race condition occurs when a destroy procedure is initiated allowing the refcount to decrement on the interface so early that it is never under counted. A malicious USB device is required for exploit. System...

The security vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client allow attackers to induce a service failure and compromise data integrity.

The security vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the execution of operations outside of the buffer data area. Exploiting these vulnerabilities can allow a malicious actor to cause service failures and compromise data integrity...