The vulnerability of the Google Chrome browser’s Bluetooth service, related to writing beyond the buffer size of memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-32815)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An input validation error vulnerability exists in Samsung mobile devices, which can be exploited by attackers to compromise integrity...

A vulnerability in the anycast function of the Cisco NX-OS operating system, which allows a attacker to compromise the integrity of protected information.

The vulnerability in the anycast function of the Cisco NX-OS operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

The vulnerability of Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the V8 browser kernel of Google Chrome allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the V8 browser kernel of Google Chrome is related to incorrect calculations of array positions. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the XenServer server virtualization platform, related to incorrect restrictions on the path name to the restricted access catalog, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the XenServer server virtualization platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information and compromise its...

The vulnerability of the AssertWorkerThread function in the Firefox browser allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the AssertWorkerThread function in the Firefox browser is related to a memory management error after the function’s memory is released. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

PT-2020-5784

Name of the Vulnerable Software and Affected Versions: Samba versions 4.11.x before 4.11.5 Samba versions 4.10.x before 4.10.12 Samba versions 4.9.x before 4.9.18 Description: The issue is related to an error in removing the right to create or modify a subtree, which would not be automatically...

Unspecified Vulnerability in Oracle VM Server for SPARC

Oracle VM Server for SPARC integrates with SPARC servers and Oracle Solaris to increase flexibility, isolate workload processing, and maximize server utilization. An unspecified vulnerability exists in Oracle VM Server for SPARC. An attacker could exploit this vulnerability to compromise integrit...

Design/Logic Flaw

A vulnerability has been identified in SINEMA Server All versions V14.0 SP2 Update 1. Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability...

Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09670)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2020-09671)

Oracle WebLogic Server is a cloud-native , for multi-tier distributed enterprise application development and deployment of enterprise-class Java platform application server . An unspecified vulnerability exists in Oracle WebLogic Server. An attacker could exploit this vulnerability to compromise...

PT-2019-4869

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 72 Firefox ESR versions prior to 68.4 Description The issue is related to a memory safety bug that can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of...

PT-2019-5057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a use-after-free condition in WebAudio, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker...

PT-2019-5055

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a use-after-free in WebSockets, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may lead to unauthorized access to...

The vulnerability in the Networking component of Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of the Networking component in Java SE and Java SE Embedded software platforms is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to information and compromise its integrity...

The vulnerability of the dpkg utility in the Astra Linux operating system, related to the lack of checks for the privilege PARSEC_CAP_INHERIT_INTEGRITY, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dpkg utility in the Astra Linux operating system is related to the lack of a check for the privilege PARSECCAPINHERITINTEGRITY. This privilege ensures that the integrity of the current process is maintained during package installation. Exploiting this vulnerability allows...

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux, related to a bug in access management, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-admin-ald-server component in the FLY operating system environment of Astra Linux is related to configuration errors that lead to the addition of already deleted users to a newly created user group. Exploiting this vulnerability allows an attacker who operates remotel...

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

CVE-2019-16174: Improper Restriction of XML External Entity Reference

An XML injection vulnerability was found in Limesurvey before 3.17.14 that allows remote attackers to import specially crafted XML files and execute code or compromise data integrity...