9703 matches found
The vulnerability of the SVG file on the MoinMoin wiki platform, due to deficiencies in the measures used to protect web page structures, allows attackers to compromise the integrity of the data.
The vulnerability of the SVG file on the wiki platform MoinMoin is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the iSCSI subsystem in Linux operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data through specially created Netlink messages...
The vulnerability of the WordPress website content management system, related to deficiencies in access control for certain functions, allows attackers to compromise data integrity.
The vulnerability of the WordPress website content management system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of Squid’s request headers, related to HTTP request processing flaws, allows attackers to compromise data integrity.
The vulnerability of Squid proxy server requests is related to a lack of proper interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
The vulnerability of the debian/sympa.postinst component of the Sympa mailing list manager allows a perpetrator to compromise the integrity of data by improperly assigning permissions for critical resources.
The vulnerability of the debian/sympa.postinst component of the Sympa mailing list manager is related to the assignment of an incorrect permission value. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...
The vulnerability of the Brotli data compression algorithm lies in the lack of a mechanism to verify the size of the copied data. This allows attackers to compromise the integrity of the data and also cause service failures.
The vulnerability of the Brotli data compression algorithm is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the data and also cause service interruptions...
The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.
The vulnerability of the WordPress website content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
CVE-2021-1801
A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...
CVE-2021-1870
A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2021-1799
A port redirection issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A malicious website may be able to access restricted ports on arbitrary servers. The highest threat from this vulnerability is to data integrity...
CVE-2021-1789
A type confusion vulnerability was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2021-1765
A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...
CVE-2020-9947
A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.0. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
PT-2021-6466 · Rust +7 · Rust +7
Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.53.0 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string in the library/std/src/net/parser.rs file. This can allow attackers to bypass acce...
PT-2021-7694 · Unknown +1 · Data::Validate::Ip +1
Name of the Vulnerable Software and Affected Versions: Data::Validate::IP versions 0.29 and earlier Description: The issue is related to improper authorization in the Data::Validate::IP module. It allows a remote attacker to impact data integrity by bypassing access control based on IP addresses...
DEBIAN-CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...