ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

GSD-2022-1002523 data processing in LG F4DV910H2 version possibly all washers in the F4DV series

In the LG F4DV910H2 washing machine, possibly all washers in the F4DV series, a data processing vulnerability exists in the WiFi card and/or software that can be attacked via simply sending a large amount of WiFi network traffic on the WiFi network the washer is attached to, resulting in the wash...

GHSA-8P5C-F836-M4H7 Magento 2 Community Edition XML Injection

An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...

Magento 2 Community Edition XML Injection

An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...

ROS-20220516-11

Vim text editor vulnerability is related to NULL pointer dereferencing error in function vimregexecstring in regexp.c. Exploitation of the vulnerability could allow an attacker acting remotely to trick a victim into accessing the Vim text editor. remotely, trick the victim into opening a speciall...

Damon data exchange platform has a logic flaw vulnerability

Ltd. is a general-purpose, platform-based data integration product with independent intellectual property rights based on more than ten years of data processing experience. There is a logic flaw vulnerability in Damon Data Exchange Platform, which can be used by attackers to obtain sensitive...

GHSA-WC97-7623-RXWX Multiple components in Apache NiFi do not restrict XML External Entity references

Apache NiFi is a system to process and distribute data. Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML...

Oracle MySQL Cluster Data Node Improper Validation of Array Index Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

Oracle MySQL Cluster Data Node Improper Validation of Array Index Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle MySQL Cluster. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Data Node jobs. The issue results from the lack of proper...

The vulnerability of the soapclient::__call method in the PHP language interpreter allows a hacker to execute arbitrary code.

The vulnerability of the soapclient::call method in the PHP language interpreter is related to an error in data processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the php_wddx_process_data function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxprocessdata function ext/wddx/wddx.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures by using an invalid ISO 8601 time value...

Unspecified Vulnerability in Apache NiFi (CNVD-2022-33109)

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A security vulnerability exists in Apache NiFi that stems from the fact that when creating or updating credentials...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain full control over the application

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when buffer overflows occur during data processing. Exploiting this vulnerability can allow an attacker to gain full control over the application through various protocols...

CVE-2021-43636

Two Buffer Overflow vulnerabilities exists in T10 V2Firmware V4.1.8cu.5207B20210320 in the httprequestparse function when processing host data in the HTTP request process...

CVE-2021-43636

CVE-2021-43636 affects TotoLink T10 V2_Firmware V4.1.8cu.5207_B20210320, with two buffer overflow vulnerabilities in the http_request_parse function when processing host data in HTTP requests. Exploitation details, affected versions beyond the listed firmware, and concrete attack vectors are not ...

German Government Warns Against Using Russia's Kaspersky Antivirus Software

Russian cybersecurity firm Kaspersky on Tuesday responded to an advisory released by Germany's Federal Office of Information Security BSI against using the company's security solutions in the country over "doubts about the reliability of the manufacturer." Calling that the decision was made on...

Command execution vulnerability exists in DMETL5 development version of Wuhan Damon Database Co.

Damon Data Exchange Platform DMETL for short is a data processing and integration platform with independent copyright developed by Wuhan Damon Database Co. Ltd. DMETL5 development version has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

Undesired behavior

Lines of code Vulnerability details You push a parameter into an array of tokens without checking if it's already exists. And if at first it's added with amount 0 it can later on be pushed with a greater amount and be twice in the array. Then in all processing it will consider the first occurrenc...

The vulnerability of the software responsible for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the failure to take measures to neutralize special elements used in the OS commands. This allows a malicious actor to execute arbitrary commands with superuser privileges.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

The vulnerability of the software component responsible for creating, monitoring, and orchestrating data processing scripts in Airflow allows attackers to circumvent existing access restrictions and execute API requests without authentication.

The vulnerability of the software component responsible for creating, monitoring, and orchestrating data processing scripts in Airflow is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and execut...