13295 matches found
The vulnerability of the _bsotype function in the BSON parsing software package allows a hacker to execute arbitrary code.
The vulnerability of the bsotype function in the BSON parsing software package is related to errors during data deserialization. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the ConfigXmlUtils function in the JDBC driver library allows a attacker to cause a service failure.
The vulnerability of the ConfigXmlUtils function in the JDBC driver library c3p0 is related to errors in processing XML entities. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Scientific Linux Security Update : evolution on SL7.x x86_64 (20200407)
evolution: specially crafted email leading to OpenPGP signatures being spoofed for arbitrary messages evolution-ews: all certificate errors ignored if error is ignored during initial account setup in gnome-online-accounts C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...
PT-2020-22858
Уязвимость менеджера файлов fly-fm связана с ошибками при сохранении разрешений. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...
CVE-2019-14019
CVE-2019-14019 involves Qualcomm Snapdragon components across multiple SoCs. The root cause is a read overflows issue due to an improper length check when decoding RAU accept/PDN disconnect Modify EPS/ bearer resource allocations and related requests. The impact is a high/severe condition reporte...
The vulnerability of the SVGKeyValuePairs function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.
The vulnerability of the SVGKeyValuePairs function coders/svg.c in the ImageMagick console-based graphics editor is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted image...
The vulnerability of the PHP interpreter, related to key management errors, allows attackers to gain unauthorized access to protected information.
The vulnerability of the PHP interpreter is related to key management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Heimdal protocol’s Kerberos implementation, related to errors in managing cryptographic keys, allows a perpetrator to carry out a “man-in-the-middle” attack.
The vulnerability of the Heimdal protocol’s Kerberos implementation is related to errors in managing cryptographic keys. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...
OPENSUSE-SU-2020:0520-1 Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.7.0 fixes the following issues: - CVE-2020-6819: Use-after-free while running the nsDocShell destructor boo1168630 - CVE-2020-6820: Use-after-free when handling a ReadableStream boo1168630 - CVE-2020-6821: Uninitialized memory could be read when...
PT-2020-2277
Name of the Vulnerable Software and Affected Versions Windows System Assessment Tool WinSAT affected versions not specified Description The issue is related to errors in file operation processing. It may allow an attacker to elevate their privileges using a specially crafted application. The...
PT-2020-2261
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in processing objects in memory within the Windows Graphics component of Windows operating systems. This can be exploited by an attacker using a...
PT-2020-2212
Name of the Vulnerable Software and Affected Versions Windows Media Foundation affected versions not specified Description The issue is related to errors in handling objects in memory within the Media Foundation framework of Windows operating systems. This can allow an attacker to gain unauthoriz...
PT-2020-2262
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in object handling in memory within the Connected User Experiences and Telemetry Service of Windows operating systems. It allows an attacker to potentially...
Siemens SIMOTICS, Desigo, APOGEE, and TALON
1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable from an adjacent network/low skill level to exploit Vendor: Siemens Equipment: SIMOTICS, Desigo, APOGEE, and TALON Vulnerability: Business Logic Errors 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled...
The vulnerability of the Firefox software, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.
The vulnerability of the Firefox software, specifically Firefox-esr, is related to an error in the insertion of certain tags from the buffer. These tags are incorrectly associated with the namespace rules. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...
The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a malicious actor to cause service failures or increase their privileges.
The vulnerability of Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges by adding a device with persistent communication capabilities...
MS15-036: Description of the security update for SharePoint Server 2013: April 14, 2015
Resolves vulnerabilities in Microsoft Office server and productivity software that could allow elevation of privilege if an attacker sends a specially crafted request to an affected SharePoint Server.IntroductionThis security update resolves elevation of privilege vulnerabilities that exist when...
Denial Of Service (DoS)
mysql is vulnerable to denial of service DoS. The vulnerability exists as a flaw in the way MySQL handled LOAD DATA INFILE requests allowed MySQL to send OK packets even when there were errors...
Denial Of Service (DoS)
webkitgtk is vulnerable to denial of service DoS. The vulnerability exists through two array index errors, leading to out-of-bounds memory reads, were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash...
The vulnerability of the Open Build Service software platform, related to authentication errors, allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.
The vulnerability of the Open Build Service software platform is related to errors in verifying the authenticity of certificates. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...