The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software occurs due to writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the ZeroMQ messaging library, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ZeroMQ messaging library relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and even cause service failures...

Philips Vue PACS (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Philips Equipment: Vue PACS Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Improper...

OPENSUSE-SU-2021:0894-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: - Upgrade to version 10.17: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. - Don't u...

The vulnerability of the Health Center component in the Oracle PeopleSoft Enterprise PT PeopleTools business application suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Health Center component in the Oracle PeopleSoft Enterprise PT PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the `caml_ba_deserialize` function in the byterun/bigarray.c file, a programming language in OCaml. This function allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the camlbadeserialize function in the byterun/bigarray.c file written in the programming language OCaml is related to integer overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servi...

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

PT-2020-6685 · Fuel Cms · Fuel Cms

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.4.7 Description: The issue is related to a lack of protection in the SQL query structure, allowing for SQL injection. This can be exploited via the col parameter in API endpoints such as "/pages/items", "/permissions/items"...

Denial Of Service (DoS)

Kernel is vulnerable to denial of service DoS. The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues...

Windows Manage RID Hijacking

This module will create an entry on the target by modifying some properties of an existing account. It will change the account attributes by setting a Relative Identifier RID, which should be owned by one existing account on the destination machine. Taking advantage of some Windows Local Users...

SUSE-SU-2017:2522-1 Security update for php53

This update for php53 fixes the several issues. These security issues were fixed: - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact ...

SUSE-SU-2016:2726-1 Security update for java-1_8_0-ibm

IBM Java 8 was updated to version 8.0-3.10 to fix the following security issues: - CVE-2016-3485: Unspecified vulnerability allowed local users to affect integrity via vectors related to Networking - CVE-2016-3511: Unspecified vulnerability allowed local users to affect confidentiality, integrity...

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

Using Acrobat for Windows and OS X after its release allows criminals to execute arbitrary code...

SUSE-SU-2016:1620-1 Security update for mariadb

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed: - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

USN-2884-1 openjdk-7 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

The vulnerability of the Red Hat Enterprise Linux operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the newt-0.51.5 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

SUSE-SU-2015:0503-1 Security update for java-1_7_0-openjdk

This update fixes 13 security issues. These security issues were fixed: - CVE-2015-0395: Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allowed remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot bnc914041. -...

MGASA-2014-0422 Updated java-1.7.0-openjdk packages fix security vulnerabilities

Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions CVE-2014-6506, CVE-2014-6531, CVE-2014-6502, CVE-2014-6511, CVE-2014-6504, CVE-2014-6519. It was...

CVE-2013-2423

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented...