The vulnerability of the user interface of Google Chrome’s web UI, related to the use of memory after it is released, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the user interface of Google Chrome’s web UI is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created HTML...

The vulnerability of the Bookmarks component in the Google Chrome web browser, related to memory usage after it is freed, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Bookmarks component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

CVE-2021-38178

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious...

The vulnerability of the pickle.load() function in Manuscript software, related to the restoration of unreliable data in memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pickle.load function in software for manuscript writers involves restoring unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the GetData DBMS, related to the execution of operations outside the buffer in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GetData database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures due to malicious database...

The vulnerability of the Handlebars template creation tool is related to errors in code generation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Handlebars template creation tool is related to errors in code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Drupal CMS system’s kernel, related to insufficient validation of input data, allows attackers to access confidential information and compromise its integrity.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially created link...

The vulnerability of TheFuck programming language package, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity and cause service failures.

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

CVE-2021-38176

The connected documents confirm a concrete vulnerability: CVE-2021-38176 affects SAP NZDT (a conversion/deployment of SAP S/4HANA 1809 to AWS). The root cause is improper input sanitization in NZDT function modules, allowing an authenticated user with certain privileges to remotely invoke these m...

PT-2021-6609 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to inadequate access control in the Xen hypervisor. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, and cause a denial ...

PT-2021-5772 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs attr record resize. This issue may allow an attacker to access...

Jetson Linux Access Control Error Vulnerability

Jetson Linux is an application software. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for compute-intensive projects.Jetson Linux is vulnerable to an access control error that could be exploited by an attacker to cause code execution, a...

PT-2021-6806 · Edk2 +2 · Edk2 +2

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to the function FpdtStatusCodeListenerPei in the open-source UEFI EDK2 development environment. It involves the release of an incorrect pointer, which can be exploited by ...

NVIDIA Jetson 安全漏洞

Jetson Linux is an application software. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for compute-intensive projects.Jetson Linux is vulnerable to an access control error that could be exploited by an attacker to cause code execution, a...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the ability to write beyond the buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of many components of the JSON processing library in C# relates to writing beyond buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the JSON file processing library in C is related to the operation that goes beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the re-hashing function for utility functions in E2fsprogs, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the re-hashing function in the E2fsprogs utility library for working with file systems lies in the fact that the operation exceeds the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and...

Arbitrary file modification vulnerability in qimengcms

qimengcms is a content management system. An arbitrary file modification vulnerability exists in qimengcms, which can be exploited by an attacker to compromise the integrity of the system...

qimengcms has a logic flaw vulnerability

qimengcms is a content management system. A logic flaw vulnerability exists in qimengcms, which can be exploited by an attacker to compromise the integrity of the system...

The vulnerability of the RTAS kernel component in the Linux operating system relates to the absence of a mechanism for authentication. This lack allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...