The vulnerability of the mechanism for checking SCTP fragments in WebRTC browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SCTP fragment checking mechanism in WebRTC browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to gain access to confidentia...

The vulnerability of Google Chrome’s WebRTC module allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s WebRTC module is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures through a...

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developer tools is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker who operates remotely to access confidential data, compromise its integrity, and even cause service failures through a...

The vulnerability of the Impress module in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Impress module in the OpenOffice office package is related to integer overflow caused by polygons created in documents. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the XPMReader::ReadXPM function in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XPMReader::ReadXPM function in the OpenOffice office suite is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper access control, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error in setting the integrity of directories. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WordPress website content management system, related to server-side query manipulation, allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of the WordPress website content management system is related to the SSRF request manipulation. This is because URL validation does not consider the interpretation of the name as a sequence of hexadecimal characters. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability of Xen hypervisors relates to the improper assignment of permissions for critical resources. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors is related to the occurrence of exceptions that are handled without modifying the processor’s level. Some interrupts are inevitably included when an exception is generated. Exploiting this vulnerability can allow a remote attacker to access confidential data,...

The vulnerability of the exif_read_data function in the PHP programming language allows attackers to disclose protected information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose protected information or cause service failures...

Riding another wave of success for our multi-layered detection and response approach

The corporate endpoint is a constant battle between cybersecurity white hats and criminal attackers. According to one study from the Ponemon Institute, 68% of organizations were victims of an attack on the endpoint in 2019. The risks and costs associated with undetected threats are immeasurable...

The vulnerability of many components of the BlueZ software suite relates to insecure management of privileges, allowing attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the BlueZ software package is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Intel Graphics Drivers relates to improper handling of access control. This allows attackers to escalate their privileges and cause service failures.

The vulnerability of Intel Graphics Drivers is related to improper handling of access control. Exploiting this vulnerability can allow attackers to enhance their privileges and cause service interruptions...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect optimization settings. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures through a specially crafted HTML...

Vulnerability of the window.global component in the Firefox browser: This component allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the window.global component in the Firefox browser is related to an error in the Object.getOwnPropertyNameswindow method. This error allows for bypassing the isolated programming environment. Exploiting this vulnerability can enable a remote attacker to gain access to...

The vulnerability of the `mwifiex_pcie_alloc_cmdrsp_buf()` function (drivers/net/wireless/marvell/mwifiex/pcie.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mwifiexpciealloccmdrspbuf function drivers/net/wireless/marvell/mwifiex/pcie.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The numerous vulnerabilities in the command-line interface (CLI) of the Cisco TelePresence Collaboration Endpoint (CE) software allow attackers to compromise the integrity of protected information or cause service failures.

The multiple vulnerabilities of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software exist due to insufficient validation of input data. Exploitation of these vulnerabilities could allow attackers to compromise the integrity of protected...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This flaw allows up to 3 bytes of information to be inserted beyond the buffer memory limit...

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis allows attackers to compromise data integrity, gain access to confidential information, and cause service failures.

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis is related to the blocking of the polymorphic deserialization in the jboss-common-core class. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain...

The vulnerability of the FreeBSD operating system arises from insufficient validation of input data by the ELF header analyzer. This allows attackers to compromise the confidentiality of protected information or cause service failures.

The vulnerability of the FreeBSD operating system exists due to insufficient checking of input data by the ELF header analyzer. Exploiting this vulnerability can allow an attacker to compromise the confidentiality of protected information or cause service failures...