Lucene search
+L

9703 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.17 views

The vulnerability of the SVG file on the MoinMoin wiki platform, due to deficiencies in the measures used to protect web page structures, allows attackers to compromise the integrity of the data.

The vulnerability of the SVG file on the wiki platform MoinMoin is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

5.4CVSS6.7AI score0.01746EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.15 views

(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the iSCSI subsystem in Linux operating systems relates to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data through specially created Netlink messages...

7.8CVSS6.8AI score0.02079EPSS
SaveExploits1References34Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.15 views

The vulnerability of the WordPress website content management system, related to deficiencies in access control for certain functions, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

7.5CVSS7.2AI score0.02654EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.9 views

The vulnerability of Squid’s request headers, related to HTTP request processing flaws, allows attackers to compromise data integrity.

The vulnerability of Squid proxy server requests is related to a lack of proper interpretation of HTTP requests. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5CVSS6.4AI score0.10933EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the debian/sympa.postinst component of the Sympa mailing list manager allows a perpetrator to compromise the integrity of data by improperly assigning permissions for critical resources.

The vulnerability of the debian/sympa.postinst component of the Sympa mailing list manager is related to the assignment of an incorrect permission value. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

4.3CVSS6.3AI score0.00979EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.13 views

The vulnerability of the Brotli data compression algorithm lies in the lack of a mechanism to verify the size of the copied data. This allows attackers to compromise the integrity of the data and also cause service failures.

The vulnerability of the Brotli data compression algorithm is related to the lack of a mechanism for checking the size of the copied data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the data and also cause service interruptions...

6.5CVSS6.9AI score0.03217EPSS
SaveExploits0References16Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.15 views

The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.6AI score0.02611EPSS
SaveExploits0References7Affected Software3
RedhatCVE
RedhatCVE
added 2021/03/29 7:15 p.m.39 views

CVE-2021-1801

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...

6.5CVSS2.8AI score0.01528EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/03/29 7:15 p.m.56 views

CVE-2021-1870

A logic issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A remote attacker may be able to cause arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS6.1AI score0.0771EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2021/03/29 7:15 p.m.38 views

CVE-2021-1799

A port redirection issue was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. A malicious website may be able to access restricted ports on arbitrary servers. The highest threat from this vulnerability is to data integrity...

6.5CVSS2.8AI score0.01771EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/03/29 6:55 p.m.49 views

CVE-2021-1789

A type confusion vulnerability was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS5.3AI score0.14542EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2021/03/29 6:48 p.m.33 views

CVE-2021-1765

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.6. Maliciously crafted web content may violate the iframe sandboxing policy. The highest threat from this vulnerability is to data integrity...

6.5CVSS2.8AI score0.01408EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2021/03/29 6:48 p.m.33 views

CVE-2020-9947

A flaw was found in WebKitGTK and WPE WebKit in versions prior to 2.30.0. Processing maliciously crafted web content may lead to arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS5.1AI score0.01655EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/03/29 12:00 a.m.5 views

PT-2021-6466 · Rust +7 · Rust +7

Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.53.0 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string in the library/std/src/net/parser.rs file. This can allow attackers to bypass acce...

9.8CVSS6.6AI score0.0289EPSS
SaveExploits7References53
Positive Technologies
Positive Technologies
added 2021/03/29 12:00 a.m.5 views

PT-2021-7694 · Unknown +1 · Data::Validate::Ip +1

Name of the Vulnerable Software and Affected Versions: Data::Validate::IP versions 0.29 and earlier Description: The issue is related to improper authorization in the Data::Validate::IP module. It allows a remote attacker to impact data integrity by bypassing access control based on IP addresses...

7.8CVSS7.3AI score0.02219EPSS
SaveExploits1References23
OSV
OSV
added 2021/03/26 5:15 p.m.3 views

DEBIAN-CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

7CVSS7.3AI score0.00794EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/26 5:15 p.m.30 views

CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

7CVSS6.7AI score
SaveExploits0References7
NVD
NVD
added 2021/03/26 5:15 p.m.23 views

CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

7CVSS0.00794EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2021/03/26 5:15 p.m.10 views

CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

7CVSS7.2AI score0.00794EPSS
SaveExploits0References18
UbuntuCve
UbuntuCve
added 2021/03/26 5:15 p.m.51 views

CVE-2021-20271

A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from th...

7CVSS7.1AI score0.00794EPSS
SaveExploits0References3
Rows per page
Query Builder