Design/Logic Flaw

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

The vulnerability of the fr-archive-libarchive.c component in the File Roller archiver program allows a perpetrator to compromise the integrity and accessibility of the protected information.

The vulnerability of the fr-archive-libarchive.c component of the File Roller archiver program is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a attacker to compromise the integrity and accessibility of the protected...

CVE-2021-40028

The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...

CVE-2021-40028

CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...

EulerOS Virtualization 3.0.2.6 : rpm (EulerOS-SA-2021-2876)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

EulerOS Virtualization 3.0.2.6 : samba (EulerOS-SA-2021-2883)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN...

Huawei HarmonyO SeID module out-of-bounds memory write vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. The Huawei HarmonyO SeID module is vulnerable to an out-of-bounds memory write vulnerability that could be exploited by an attacker to compromise data integrity...

haproxy: it can lead to a situation with an attacker-controlled HTTP Host header because a mismatch between Host and authority is mishandled

haproxy was found to be vulnerable to HTTP host header attack: This problem creates a scenario in which it's possible to drop the Host header and use the authority only after forwarding to a second http2 layer, possibly causing two differing values of Host at a different stage. The highest threat...

The vulnerability of the sequelize.json() ORM library for applications like Sequelize allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sequelize.json ORM library for applications like Sequelize is related to the lack of protection for SQL query structures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of embedded Qualcomm software due to buffer overflows allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of microprogramming software in embedded Qualcomm chips is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information, due to the lack of checking the length of th...

CVE-2021-36751

ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...

Design/Logic Flaw

ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation without knowledge of the key. This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation...

CVE-2021-36751

ENC DataVault 7.2.3 and earlier, including OEM versions, use a cryptographic algorithm vulnerable to ciphertext malleability, and lack a data-integrity check. An attacker could modify ciphertext, causing corresponding plaintext changes. The vulnerability is tied to ENC DataVault’s encryption choi...

PT-2022-10543 · Unknown · Enc Datavault Oem +1

Name of the Vulnerable Software and Affected Versions: ENC DataVault versions 7.2.3 and before ENC DataVault OEM versions Description: The issue concerns the use of an encryption algorithm that is vulnerable to data manipulation, known as ciphertext malleability, without requiring knowledge of th...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-2883)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2021-2876)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2869-1 : xorg-server - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2869 advisory. Jan-Niklas Sohn discovered that multiple input validation failures in X server extensions of the X.org X server may result in privilege escalation if the X server ...

EulerOS Virtualization 3.0.2.0 : rpm (EulerOS-SA-2021-2823)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

The vulnerability in the implementation of the WebRTC technology in Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the WebRTC technology implementation in Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

CVE-2021-35243

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server 12.7.7 and earlier, allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the...