264 matches found
OESA-2021-1270 dovecot security update
Dovecot is an IMAP server for Linux/UNIX-like systemsa wrapper package that will just handle common things for all versioned dovecot packages. Security Fixes: The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular...
Unspecified Vulnerability in JerryScript (CNVD-2021-42986)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparseexpression in js-parser-expr.c:3565 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
SUSE: Security Advisory (SUSE-SU-2020:1934-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Packet Forwarding Engine DoS
The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
Google Chrome V8 Engine Data Compromise
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...
PT-2021-17151 · Unknown +3 · Godot Engine +3
Name of the Vulnerable Software and Affected Versions: Godot Engine versions up to v3.2 Description: A stack overflow issue exists due to improper boundary checks when loading .TGA image files. Depending on the context of the application, the attack vector can be local or remote, and can lead to...
PT-2021-17150 · Unknown +3 · Godot Engine +3
Name of the Vulnerable Software and Affected Versions: Godot Engine versions up to v3.2 Description: An integer overflow issue exists in the Godot Engine that can be triggered when loading specially crafted .TGA image files. The issue is located in the ImageLoaderTGA::load image function and lead...
chromium-browser: Uninitialized Use in V8
The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...
UBUNTU-CVE-2020-16006
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Microsoft Office Access Connectivity Engine Code Execution
The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
mysql: InnoDB unspecified vulnerability (CPU Jul 2020)
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...
Open Redirects
ovirt-engine is vulnerable to open redirects. The vulnerability exists as it is possible to redirect to arbitrary URL allows for phishing...
Windows Jet Database Engine Code Execution
The vulnerability of the Windows Jet Database Engine database management system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
Google Chrome Code Execution Vulnerability (CNVD-2020-49888)
Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A security vulnerability exists in V8 in versions of Google Chrome prior to 84.0.4147.105. A remote attacker can exploit the vulnerability to execute arbitrary code with the help of a specially...
Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability (CNVD-2021-24002)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way the VBScript Engine handles objects in memory in...
UBUNTU-CVE-2020-13401
An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAPNETRAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service...
EUVD-2022-1160
An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAPNETRAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service...
Gitlab -- Multiple Vulnerabilities
Gitlab reports: User Email Verification Bypass OAuth Flow Missing Email Verification Checks Notification Email Verification Bypass Undisclosed Vulnerability on a Third-Party Rendering Engine Group Sign-Up Restriction Bypass Mirror Project Owner Impersonation Missing Permission Check on Fork...
Google Chrome V8 Heap Buffer Overflow DoS
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...
