The vulnerability of the start_read() function in the SoX audio processing program allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the startread function in the SoX sound processing program is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service...

The vulnerability of the Pillow library for working with raster graphics lies in the reading of data beyond the allowed buffer limit. This allows attackers to compromise the integrity of the data and cause service failures.

The vulnerability of the Pillow library for working with raster graphics is related to improper handling of gaps in path names. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to compromise data integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the STARTTLS function in email servers, related to insufficient elimination of special elements in the request, allows attackers to compromise data integrity.

The vulnerability of the STARTTLS function of the Exim mail server is related to insufficient elimination of special elements in the request. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of the `resize_packet` function in the `fuzz_rfc1035.c` component of the DNS server Dnsmasq allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the resizepacket function in the fuzzrfc1035.c component of the DNS server Dnsmasq is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the LinkDialog plugin in the module library facilitates the development of JavaScript- or AJAX-based applications and Dojo Toolkit-powered websites. This vulnerability allows attackers to compromise data integrity.

The vulnerability of the LinkDialog plugin from the module library, which facilitates the development of JavaScript- or AJAX-based applications and Dojo Toolkit websites, is related to the lack of protective measures for website structures. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to compromise data integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

PT-2023-6792 · Apple +6 · Apple Macos +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 WebKitGTK affected versions not specified WPE WebKit affected versions not specified Description: The issue is related to insufficient input validation, which may allow a remote attacker to impact data integrity. ...

PT-2023-15724 · Unknown · Mediaprovider

Name of the Vulnerable Software and Affected Versions: MediaProvider affected versions not specified Description: The issue affects the confidentiality and integrity of data due to a vulnerability in the MediaProvider module that allows unauthorized data read. Recommendations: At the moment, ther...

The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebRTC technology relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

Code injection

SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data...

PT-2023-18710 · Sandisk · Sandisk Privateaccess

Name of the Vulnerable Software and Affected Versions: SanDisk PrivateAccess versions prior to 6.4.9 Description: The issue concerns the support of insecure TLS 1.0 and TLS 1.1 protocols, making the system susceptible to man-in-the-middle attacks. This compromises the confidentiality and integrit...

The vulnerability of the UMA component in Google Chrome browser allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s UMA User Metrics Analysis component is related to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2023-8787 · Veritas · Veritas Netbackup It Analytics

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup IT Analytics versions prior to 11.2.0 Description: The issue is related to errors in cryptographic signature verification, which could allow a remote attacker to compromise data integrity. A malicious actor could exploit the...

Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023

NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering. To...

maven: Block repositories using http by default

A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...

CVE-2023-27501 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete...

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Stack-Based Buffer Overflow

nvidia-cuda-toolkit is vulnerable to Stack-Based Buffer Overflows. A remote attacker is able to exploit a buffer overflow condition by persuading a local user to download a corrupted file and execute cuobjdump against it, leading to denial of service and loss of data integrity...

Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2023-1499)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...