9732 matches found
PT-2022-6688 · Netbotz 4 · Netbotz 4
Name of the Vulnerable Software and Affected Versions: NetBotz 4 versions 4.7.0 and prior Description: A vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. This issue is related to improper...
CVE-2022-41260
SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality a...
The vulnerability of the Accessibility (Special Features) module of the Google Chrome browser, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information
The vulnerability of the Accessibility Special Features module of the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Google Chrome browser’s extension allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Google Chrome browser’s “Feedback” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2667)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the full-screen mode implementations of Google Chrome and Microsoft Edge allows a perpetrator to compromise the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the full-screen mode implementations of Google Chrome and Microsoft Edge is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to compromise the integrity, accessibility, and confidentiality of the protected information...
The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware of Cisco Analog Telephone Adapter (ATA) series 190 devices allows a perpetrator to cause memory corruption and compromise the integrity of protected information.
The vulnerability of the Cisco Discovery Protocol implementation in microprogrammed software for Cisco Analog Telephone Adapter ATA devices of the 190 series is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a malicious actor to cause memory...
CVE-2022-42310
Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the Xenstore data base, as the cleanup after the error will not remove all nodes already created. When the transaction is...
The vulnerability of the Frames component in Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Frames component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...
The vulnerability of Google Chrome’s Internals component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s Internals component is related to writing beyond the buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2635)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the ins_compl_add function in the insexpand.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the inscompladd function in the insexpand.c component of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and...
The vulnerability of the `vim regsub_both` function in the Vim editor’s regexp.c file allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the vim regsubboth function in the regexp.c file of the Vim text editor is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue
A flaw was found in Mozilla. According to the Mozilla Foundation Security Advisory, Thunderbird users who use the Matrix chat protocol are vulnerable to a data corruption issue. An attacker could potentially cause data integrity issues by sending specially crafted messages...
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue
A flaw was found in Mozilla. According to the Mozilla Foundation Security Advisory, Thunderbird users who use the Matrix chat protocol are vulnerable to a data corruption issue. An attacker could potentially cause data integrity issues by sending specially crafted messages...
Security Bulletin: A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Services
Summary A security vulnerability in GO affects IBM Cloud Pak for Multicloud Management Managed Services Vulnerability Details CVEID:CVE-2021-44717 DESCRIPTION: Golang Go could allow a remote attacker to bypass security restrictions, caused by an error in the syscall.ForkExec interface. By causing...
OpenJDK: improper MultiByte conversion can lead to buffer overflow (JGSS, 8286077)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated...
OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JNDI. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit...
PT-2022-6799 · Unknown +2 · Openimageio +2
Name of the Vulnerable Software and Affected Versions: OpenImageIO versions master-branch-9aeece7a through v2.3.19.0 Description: A heap-based buffer overflow vulnerability exists in the tile decoding code of the TIFF image parser. This issue can be triggered by a specially-crafted TIFF file,...
CVE-2022-21631
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards component: Design Tools SEC. Supported versions that are affected are 9.2.6.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards...