The vulnerability of the os.path.normpath() function in the Python interpreter lies in its ability to bypass permission checks when shortening a path by inserting a zero byte. This allows an attacker to compromise the integrity of the protected information.

The vulnerability of the os.path.normpath function in the Python interpreter relates to the handling of permission lists when shortening a path by inserting a zero byte. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of protected information...

The vulnerability of RPD operating systems such as Juniper Networks’ Junos OS Evolved and Junos allows attackers to influence the integrity of protected information.

The vulnerability of RPD operating systems such as Juniper Networks’ Junos OS Evolved and Junos is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to influence the integrity of protected information...

The vulnerability of the application software interface of the Avanpost IDM system lies in the insufficient verification of access rights to objects within the application. This allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the application programming interface of the Avanpost IDM system relates to insufficient verification of access rights to objects within the application. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Windows SmartScreen security function in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Windows SmartScreen’s security function in Windows operating systems is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the i2c_transfer() function in the i2c component of the Linux operating system allows a attacker to influence the integrity of the protected information.

The vulnerability of the i2ctransfer function in the Linux operating system’s i2c component is related to improper checking for unusual or exceptional conditions. Exploiting this vulnerability could allow an attacker to influence the integrity of the protected information...

Out of Bounds Read in Arm® Trusted Firmware

Bulletin ID: AMD-SB-8003 Potential Impact: Information Integrity Severity: Refer to the Summary section for details Summary Improper input validation in ARM® Trusted Firmware used in AMD ZynqTM UltraScale+TM MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads potentially...

The vulnerability in the web interface of a Git-based software platform for collaborative code development on GitLab allows a perpetrator to influence the integrity of the protected information.

The vulnerability of the Git-based software platform’s web interface for collaborative code development on GitLab is related to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected...

The vulnerability of the taprio_parse_mqprio_opt() function in the network/scheduler subsystem of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the taprioparsemqprioopt function in the net/sched/schtaprio.c module, part of the network scheduling subsystem in the Linux operating system’s kernel, is related to insufficient validation of data received from users. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Outside In Core component within Oracle’s software development kit (SDK) allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Outside In Core component in Oracle’s software development toolset SDK exists due to insufficient testing of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the fromqossetting (/goform/fromqossetting) function in the Tenda F1202 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromqossetting /goform/fromqossetting function in the Tenda F1202 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information by...

The vulnerability of the “Manage Incoming Payment Files” component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the “Manage Incoming Payment Files” component in the SAP S/4HANA software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the irdmaGenerateFlush_completions() function in the InfiniBand driver for Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the irdmaGenerateFlushcompletions function in the drivers/infiniband/hw/irdma/utils.c file of the Linux kernel’s InfiniBand irdma driver is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality,...

PT-2024-9401

Name of the Vulnerable Software and Affected Versions OpenSC affected versions not specified OpenSC tools affected versions not specified PKCS11 module affected versions not specified minidriver affected versions not specified CTK affected versions not specified Description An issue exists...

The vulnerability of the __unix_gc() function in the net/unix/garbage.c module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the unixgc function in the net/unix/garbage.c module of the Linux operating system is related to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the JsonErrorReportValve class in the Apache Tomcat application server allows a attacker to influence the integrity of the protected information.

The vulnerability of the JsonErrorReportValve class in the Apache Tomcat application server is related to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

The vulnerability of the Podlove Web Player plugin in the WordPress content management system, related to deficiencies in the authentication process, allows attackers to compromise the integrity and confidentiality of protected information.

The vulnerability of the Podlove Web Player plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the integrity and confidentiality of the protected information...

The vulnerability of the PSR-7 guzzlehttp/psr7 HTTP message processing library, due to insufficient validation of input data, allows attackers to compromise the integrity of the protected information.

The vulnerability of the PSR-7 guzzlehttp/psr7 HTTP message processing library is related to insufficient validation of input data during header processing. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

The vulnerability of the Mozilla Firefox browser’s fetch function is related to resource management errors, allowing attackers to compromise the integrity of protected information.

The vulnerability of the Mozilla Firefox browser’s fetch function is related to resource management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

CVE-2024-27455

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.04.04 and Assetwise Information Integrity Server 23.00.02.03...

Code injection

In the Bentley ALIM Web application, certain configuration settings can cause exposure of a user's ALIM session token when the user attempts to download files. This is fixed in Assetwise ALIM Web 23.00.02.03 and Assetwise Information Integrity Server 23.00.04.04...