The vulnerability of the ReadEnhMetaFile function (coders/emf.c) in the console-based image editing tool ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ReadEnhMetaFile function in the console-based image editing tool ImageMagick is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the FaxFinder fax server, related to errors in managing registration data, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of these data.

The vulnerability of the FaxFinder fax server stems from errors in the management of registration data, which are embedded in the original HTML code /systemconfiguration/ldap in an open manner. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, an...

The vulnerability in the web interface of the Cisco IOS XE operating system allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to deficiencies in access control for new users—specifically, the access settings that are configured for users through the web interface. Exploiting this vulnerability allows a malicious actor to enhance their...

Vulnerability in the UI framework of the Android operating system, which allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability in the Android operating system’s UI framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and compromise the confidentiality, integrity, and accessibility of data...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Security Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. An unspecified vulnerability exists in the Filesystem subcomponent of the Sun ZFS Storage AK component of the Oracle Sun Systems...

Oracle MySQL Connector/Net Subcomponent Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...

Oracle MySQL Server Group Replication GCS Subcomponent Denial of Service Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Group Replication GCS subcomponent of t...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2017-31499)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2017-31501)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

Oracle Java SE Java Advanced Management Console Sever Subcomponent Denial of Service Vulnerability

Oracle Java SE is Oracle's suite of standard edition Java platforms for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. java Advanced Management Console is one of the Java Advanced Management Console components for creating...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-32209)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: Replication subcomponent of the...

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of the HTTP/2 module of the Apache Traffic Server allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to improper handling of HTTP/2 requests. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of data...

PT-2017-3586 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: A use-after-free flaw was found in fs/userfaultfd.c in the Linux kernel. The issue is related to the handling of fork failure when dealing with event messages. Failure to fork correctly can...

The vulnerability of the Android CAF-release operating system, related to access control deficiencies, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...

The vulnerability of the Inter-RAT process in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inter-RAT process in the Android CAF-release operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...