The vulnerability of the RTL Arabic Character Handler component in the Mozilla Firefox browser allows attackers to perform spoofing attacks using a specially created web page.

The vulnerability of the RTL Arabic Character Handler component in the Mozilla Firefox browser is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created web page...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-2412)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the localstorage object in the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the localstorage storage mechanism in the Mozilla Firefox browser is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures using the network MySQL protocol...

CVE-2023-3484 Incorrect Authorization in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starting from 16.0 before 16.0.7, all versions starting from 16.1 before 16.1.2. An attacker could change the name or path of a public top-level group in certain situations...

The vulnerability of the `parse_tag_and_wiretype` function in the `protobuf-c.c` component of the Protobuf-c programming language for serializing data allows a attacker to cause a service failure.

The vulnerability of the parsetagandwiretype function in the protobuf-c.c component of the Protobuf serialization programming language C Protobuf-c is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures remotely...

The vulnerability of the LibSSH library for client authentication, related to pointer dereferencing errors, allows a perpetrator to cause a service failure.

The vulnerability of the LibSSH client authentication library is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the Protobuf data serialization protocol, related to pointer dereferencing errors, allows attackers to cause service failures.

The vulnerability of the Protobuf data serialization protocol is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Perl programming language library HTTP::Tiny involves authentication process errors, which allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language library HTTP::Tiny is related to errors in the TLS certificate authentication process. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to increase their privileges

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

The vulnerability of the Windows Installer installer on Windows operating systems allows a hacker to gain elevated privileges within the system.

The vulnerability of the Windows Installer installer on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

The vulnerability of the System Settings component in iOS, iPadOS, watchOS, tvOS, and macOS allows attackers to compromise the integrity of protected information.

The vulnerability of the System Settings component in iOS, iPadOS, watchOS, tvOS, and macOS is related to state management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Netskope client service, related to synchronization errors when using a shared resource, allows a perpetrator to increase their privileges.

The vulnerability of the Netskope client service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the library for working with the DICOM format in DCMT, related to pointer assignment errors, allows attackers to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.

The vulnerability of the Core component in Oracle VM VirtualBox is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Sandbox component in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.

The vulnerability of the Sandbox component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to access confidential information and also retain user data...

The vulnerability of the Checkmarx plugin in the Jenkins automation server allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the Checkmarx server automation plugin for Jenkins is related to errors during the verification of SSL/TLS certificates. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” attack...

Design/Logic Flaw

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch invalid string conversion errors like const message = $ toString: '' which would cause the NodeJS process to crash when sending an unexpected Socket.io...

USN-6236-1 connman vulnerabilities

It was discovered that ConnMan could be made to write out of bounds. A remote attacker could possibly use this issue to cause ConnMan to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. CVE-2021-26675,...