nodejs-lodash: prototype pollution in zipObjectDeep function

A flaw was found in nodejs-lodash in versions 4.17.15 and earlier. A prototype pollution attack is possible which can lead to arbitrary code execution. The primary threat from this vulnerability is to data integrity and system availability...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

CloudForms: Out-of-band OS Command Injection through conversion host

An out-of-band OS command injection vulnerability was found in Red Hat CloudForms. An authenticated malicious attacker could execute arbitrary commands on the server by sending a specially crafted request. The highest threat from this vulnerability is to data confidentiality and integrity as well...

The vulnerability of Google Chrome’s URL formatting mechanism allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s URL formatting mechanism is related to a bug in the system’s resource management mechanism. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created domain name...

The vulnerability of Google Chrome’s exchange buffer, related to deficiencies in the protection measures for web page structures, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Exchange Buffer is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the Omnibox component in the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the Omnibox component in Google Chrome relates to the lack of a standard permission mechanism. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...

The vulnerability of trusted browser types like Google Chrome allows attackers to compromise data integrity.

The vulnerability of the trusted browser types Google Chrome is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developer tools is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker who operates remotely to access confidential data, compromise its integrity, and even cause service failures through a...

The vulnerability of trusted browser types like Google Chrome, due to the lack of standard permission mechanisms, allows attackers to compromise data integrity.

The vulnerability of the trusted browser types Google Chrome is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

The vulnerability of the fly-fm file manager lies in the fact that resources are not released after their useful period has ended. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the fly-fm file manager is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability can allow attackers to gain access to confidential data and compromise its integrity...

The vulnerability of the LibreOffice office suite lies in its improper validation of input data, which allows an attacker to compromise the integrity of the data.

The vulnerability of the LibreOffice office suite is related to a form field that might contain a URL pointing to an external server. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the Chromium browser’s user interface in Google Chrome, related to errors in the application of rules for extensions, allows a violator to compromise data integrity.

The vulnerability of Google Chrome’s Chromium user interface is related to errors in the application of rules in extensions. Exploiting this vulnerability allows a malicious actor to affect data integrity through a specially created HTML page...

The vulnerability in the implementation of the WebView user interface of the Chromium browser by Google Chrome allows a perpetrator to compromise data integrity.

The vulnerability of the WebView implementation in the Chromium browser’s user interface is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created application...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Invoice component in the Oracle Trade Management application allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Invoice component in the Oracle Trade Management application is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected data or compromise the integrity of the...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the fly-wm window manager, related to incorrect data initialization, allows attackers to compromise data integrity.

The vulnerability of the fly-wm window manager is related to incorrect data initialization. Exploiting this vulnerability can allow attackers to compromise data integrity...

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploitation of this vulnerability could allow an attacker operating remotely to compromise the confidentiality,...

The vulnerability in the full-screen mode of the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to the lack of a mechanism for standard resolutions. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...