Lucene search
+L

9675 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.5AI score0.00654EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of Google Chrome’s Blink rendering module relates to improper access control to critical resources, allowing attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to improper control of access to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

7.1CVSS7AI score0.00706EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.9 views

The vulnerability of Google Chrome, related to improper control of access to critical resources, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome relates to improper control of access to a critical resource. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

7.1CVSS7AI score0.00732EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of the Omnibox address bar in Google Chrome browser tools allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome browser tools is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...

4.3CVSS6.5AI score0.00669EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.10 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.5AI score0.00604EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.21 views

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

4.3CVSS6.5AI score0.00688EPSS
SaveExploits0References8Affected Software4
RedHat Linux
RedHat Linux
added 2020/04/20 7:51 p.m.11 views

runc: volume mount race condition with shared mounts leads to information leak/integrity manipulation

A flaw was found in runc. An attacker who controls the container image for two containers that share a volume can race volume mounts during container initialization, by adding a symlink to the rootfs that points to a directory on the volume. The highest threat from this vulnerability is to data...

7CVSS7.1AI score0.00433EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/04/17 12:00 a.m.9 views

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-51467 )

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7.5CVSS8.5AI score0.00567EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.49 views

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-24429)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

7CVSS8.5AI score0.00385EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.8 views

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-51468 )

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

8.2CVSS8.5AI score0.00576EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.35 views

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox (CNVD-2020-23400)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

8.2CVSS8.5AI score0.00389EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:00 a.m.8 views

Oracle PeopleSoft Products PeopleSoft Enterprise SCM Purchasing Unauthorized Operation Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle Oracle. The product provides human capital management, financial management, supplier relationship management and other functions. A security vulnerability exists in the Purchasing component of...

4.9CVSS8.5AI score0.007EPSS
SaveExploits0
CNVD
CNVD
added 2020/04/17 12:00 a.m.10 views

Oracle Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management. A security vulnerability exists in the Security component of Retail Store Inventory Management...

8.8CVSS8.5AI score0.01542EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/04/16 8:55 p.m.10 views

Mozilla: Use-after-free when handling a ReadableStream

A flaw was found in Mozilla's Firefox. A race condition can occur when handling a ReadableStream causing a use-after-free memory issue. The highest threat from this vulnerability are to data confidentiality and integrity as well as system availability...

8.1CVSS7.2AI score0.06305EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2020/04/16 8:31 p.m.8 views

Mozilla: Use-after-free while running the nsDocShell destructor

A flaw was found in Mozilla Firefox. A race condition can occur while running the nsDocShell destructor causing a use-after-free memory issue. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.1CVSS7.2AI score0.02978EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2020/04/16 7:46 p.m.15 views

jackson-databind: Serialization gadgets in org.springframework:spring-aop

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.1CVSS7.1AI score0.03697EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/16 7:46 p.m.10 views

jackson-databind: serialization in weblogic/oracle-aqjms

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.1CVSS7.1AI score0.04458EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/16 7:46 p.m.10 views

jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.1CVSS7.1AI score0.08072EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/16 7:46 p.m.13 views

jackson-databind: Serialization gadgets in anteros-core

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.1AI score0.18345EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/16 7:46 p.m.16 views

jackson-databind: Serialization gadgets in ibatis-sqlmap

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.1AI score0.18383EPSS
SaveExploits0References4
Rows per page
Query Builder