The vulnerability of the Pluto demon in the VPN protocol using “IPsec” with libreswan, which involves reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the Pluto demon’s VPN protocol using “IPsec” in libreswan involves reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP arises from improper privilege assignment. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP exists due to incorrect privilege assignment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data, compromise its integrity, and cause service failur...

The vulnerability of the wp_ajax_replyto_comment function in ajax-actions.php and the wpHandleCommentSubmission function in comment.php of the WordPress content management system allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the wpajaxreplytocomment function in ajax-actions.php and the wpHandleCommentSubmission function in comment.php of the WordPress content management system is related to insufficient validation of the requests being executed. Exploiting this vulnerability could allow an attack...

The vulnerability of the `vhost_user_set_log_base` function in libraries and drivers for fast packet processing in DPDK allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the vhostusersetlogbase function in libraries and drivers for fast packet processing in DPDK lies in a potential integer overflow. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the Environment Mgmt Console component in the Oracle PeopleSoft Enterprise PeopleTools business application suite, due to insufficient input data validation, allows attackers to modify, add, or delete data, or cause system downtime or service failures.

The vulnerability of the Security component of the Oracle Unified Directory application for simplified deployment in the Oracle Fusion Middleware software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to modify, add, or delete data...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s options, which allow a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system-related components is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, specifically the Server:Optimizer, related to database management is due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to cause a service failure.

The vulnerability in the drivers/net/slip/slip.c and drivers/net/can/slcan.c files of the Linux operating system relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

Vulnerability of the Server component: The DML of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the Blink rendering module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...

The vulnerability of the BSON parsing software package, caused by integer overflows, allows attackers to trigger a service failure.

The vulnerability of the BSON parsing software package arises due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

PT-2020-5176 · Dovecot +6 · Dovecot +6

Name of the Vulnerable Software and Affected Versions: Dovecot versions prior to 2.3.11.3 Description: The issue is related to incorrect input validation in the Dovecot mail server, which can be exploited by a remote attacker. This exploitation can lead to a disruption in the authentication servi...

Vulnerability of the Server component: Security: Audit of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component, specifically Security: Audit of the Oracle MySQL Server database management system, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the Audit Plug-in component of the MySQL Server database management system allows a hacker to trigger a service failure.

The vulnerability of the Audit Plug-in component of the MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the security mechanism for executing macros in the LibreOffice office software package allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the security mechanism for executing macros in the LibreOffice office software package is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the Analytics Web Answers component of the Oracle Business Intelligence Enterprise Edition software allows a hacker to gain access to, modify, add, or delete data, or to cause service interruptions.

The vulnerability of the Analytics Web Answers component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or cause a service failure...

VulnCheck KEV: CVE-2020-15654

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work...

The vulnerability of the WebSQL module in Google Chrome browser allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s WebSQL module relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...

The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome browser extensions is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created extensio...