The vulnerability of the ANGEL graphics engine in Google Chrome browsers, related to the execution of operations beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Google Chrome browser developer tools allows a hacker to compromise data integrity.

The vulnerability of Google Chrome browser developer tools is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability in the exec/totemcrypto.c function of the group communication system allows for attacks against fault-tolerant clusters of Corosync. This vulnerability enables attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the exec/totemcrypto.c function of the group communication system for Corosync-resistant clusters is caused by a numerical overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Oracle Marketing Unauthorized Access Vulnerability (CNVD-2020-26998)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to a stack overflow error in nrappkit, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to a stack overflow error in the nrappkit library. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Google Chrome browser’s WebMIDI function, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebMIDI function in Google Chrome browser is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML...

The vulnerability of the Prio library in the Firefox browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Prio library in the Firefox browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the Oracle Hospitality Suites Management component of the Oracle Food and Beverage Applications software package allows a perpetrator to gain unauthorized access to protected data or compromise the integrity of protected information.

The vulnerability of the Oracle Hospitality Suites Management component of the Oracle Food and Beverage Applications suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data or compromise the integrity ...

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

Nextcloud: Downgrade encryption scheme and break integrity through known-plaintext attack

The idea behind the Server Side Encryption is that you can move your encrypted files to an external party without that external party being able to to read or modify those files. Some time ago, Nextcloud switched from unauthenticated CFB cipher block mode to authenticated CTR cipher block mode in...

The vulnerability of the API XMLHttpRequest component in browsers such as Firefox, Firefox ESR, and the email client Thunderbird lies in its memory management after it is freed. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the API XMLHttpRequest component in browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after it is released upon a XHR request. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise i...

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability could allow a remote attacker to compromise data integrity, gain unauthorized access to protected information, and cause...

The vulnerability of the task scheduler fly-admin-cron in the FLY operating system of Astra Linux allows a perpetrator to access confidential data, compromise its integrity, and cause service failures due to improper handling of registration data.

The vulnerability of the task scheduler fly-admin-cron in the FLY environment of the Astra Linux operating system is related to an incorrect definition of the user performing the task editing operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

The vulnerability of the fly-admin-security-monitor component in the FLY operating system environment of the Astra Linux platform allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the fly-admin-security-monitor component in the FLY operating environment of the Astra Linux system is related to the absence of blocking mechanisms for system commands, as well as the absence of a configuration status for the closed-programming-environment security system...

The vulnerability of the PHP interpreter’s read function, related to reading beyond the boundaries of memory buffers, allows attackers to cause service failures, violate data confidentiality, and compromise the integrity of protected data.

The vulnerability of the PHP language interpreter’s read function is related to the rereading of buffers based on queues. Exploiting this vulnerability can allow attackers to cause service failures, violate the confidentiality and integrity of protected data by reading memory allocated to specifi...

MongoDB 2.6.x < 2.6.9, 3.0.x < 3.0.14, 3.2.x < 3.2.8 mongod

The version of the remote MongoDB server is 2.6.x prior to 2.6.9, is 3.0.x 3.0.14 or is 3.2.x 3.2.8. It is, therefore, affected by multiple vulnerabilities. - A credentials disclosure vulnerability exists in the PEMKeyPassword, clusterPassword and Windows servicePassword. An unauthenticated local...

The vulnerability of the web interface of the microprogramming software for threat detection and prevention, Juniper Advanced Threat Prevention, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the web interface of Juniper Advanced Threat Prevention software for detecting and preventing threats is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

Unspecified Vulnerability in Oracle E-Business Suite Marketing (CNVD-2019-40798)

Oracle E-Business Suite E-Business Suite is a fully integrated set of Oracle's global business management software. marketing is one of the Internet-based marketing management components. An unspecified vulnerability exists in Oracle E-Business Suite Marketing. An attacker could exploit this...