Medium: openssl

Issue Overview: Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that ar...

CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability...

PT-2024-5442 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to a memory usage problem after memory has been freed, which can be exploited by a remote attacker to execute arbitrary code...

IBM Security Verify Access Input Validation Error Vulnerability (CNVD-2024-26083)

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as the Web, mobile, IoT and cloud using risk-based access, single sign-on, integrated access management controls...

Microsoft OLE DB Provider for SQL Server 安全漏洞

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

Design/Logic Flaw

IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445...

The vulnerability of the Airflow MySQL Provider software, which is used for creating, monitoring, and orchestrating data processing scenarios, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Airflow MySQL Provider software, which is used for creating, monitoring, and orchestrating data processing scenarios, stems from the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicio...

Design/Logic Flaw

The contacts component has a free undefined provider vulnerability. Successful exploitation of this vulnerability may affect data integrity...

CVE-2022-46311

The contacts component has a free undefined provider vulnerability. Successful exploitation of this vulnerability may affect data integrity...

CVE-2022-46311

The contacts component has a free undefined provider vulnerability. Successful exploitation of this vulnerability may affect data integrity...

PT-2022-27802 · Unknown · Sectelephonyprovider

Name of the Vulnerable Software and Affected Versions: TelephonyProvider affected versions not specified Description: The issue concerns a problem in the TelephonyProvider module related to obtaining values, which could impact data confidentiality upon successful exploitation. Recommendations: At...

CVE-2022-36836

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission...

CVE-2022-36836

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission...

CVE-2022-36836

CVE-2022-36836 affects Samsung Charm (Charm by Samsung) prior to version 1.2.3, where an unprotected provider enables reading the connection state without permission. The underlying issue is a lack of access protection in the provider interface, exposing connection state data to attackers with lo...

com.redhat.rhevm.api:rhevm-api (>=0.1-milestone <=1.0-rc1.21), com.redhat.rhevm.api:rhevm-api-cli-actions (>=0.9-milestone1 <=0.9-milestone-4.4) +21 more potentially affected by CVE-2018-1051 via org.jboss.resteasy:resteasy-yaml-provider (>=2.0-RC1 <=3.0.24.Final)

org.jboss.resteasy:resteasy-yaml-provider MAVEN version =2.0-RC1, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.1-milestone, =0.1-milestone, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.9-milestone1, =0.9-milestone3, =0.9-milestone1, =0.1-milestone,...

PT-2021-16662 · Unknown · Bluetoothsettingsprovider

Name of the Vulnerable Software and Affected Versions: BluetoothSettingsProvider versions prior to SMR Oct-2021 Release 1 Description: The issue is related to an improper access control vulnerability. This vulnerability allows an untrusted application to overwrite some Bluetooth information...

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the org.aoju.busproxy.provider.remoting.RmiProvider component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

PT-2020-4881 · Microsoft · Windows Function Discovery Ssdp Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Function Discovery SSDP Provider affected versions not specified Description: The issue is related to insufficient security mechanism implementation in the Windows Function Discovery SSDP Provider component of Windows operating system...

CVE-2018-14066

The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequence is that an application without the READSMS permission can read SMS messages. This affects Infinix X571 phones, as well as various Lenovo...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the PropertyProvider::FindJustificationRange function in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause a denial-of-service attack reading beyond the boundaries of the system...