X Window System Xorg-server Heap Buffer Overflow DoS

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server is related to integer overflows. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

PostgreSQL Unreliable Search Path

The vulnerability of the PostgreSQL database management system is related to an unreliable search path mechanism. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software is related to the execution of operations beyond the acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

fly-qdm Graphical Interface Confidential Data Access

The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

Firefox ESR Thunderbird Parsing Module Data Authenticity Issue

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

fly-wm Authentication Bypass

The vulnerability of the fly-wm window manager is related to the password prompt displayed during session blocking. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

Net-SNMP Privilege Escalation

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

OpenSSL Uncontrolled Resource Consumption DoS

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

Firefox browsers DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

QEMU Hardware Emulation Heap Buffer Overflow DoS

The vulnerability of the xgmacenetsend function in the hw/net/xgmac.c file of the QEMU hardware emulation software is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to access protected information, compromise its...

[SECURITY] [DLA 2412-2] openjdk-8 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2412-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 22, 2020 https://wiki.debian.org/LTS -...

Junos Kernel Routing Table DoS

The vulnerability of the Kernel Routing Table module in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Junos KMS Configuration Failure Service Disconnection

The vulnerability of the Junos operating system’s Key Management Service implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause failures in IPSec channel configurations and service availability...

Node.js DoS

The vulnerability of the Node.js software platform is related to an error in handling HTTP header names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

urllib3 Uncontrolled Resource Consumption DoS

The vulnerability of the urllib3 module in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

systemd Resource Leak

The vulnerability of the initialization and service management subsystems in Linux’s systemd relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

Twisted Web DoS

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Twisted Web DoS

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ImageBurner component Code Execution

The vulnerability of the ImageBurner browser component in Google Chrome arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...