The vulnerability in implementations of ASN.1/DER, PKIX, Kerberos Heimdal, and the Samba network communication software package, related to repeated memory release, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of ASN.1/DER, PKIX, Kerberos Heimdal, and the Samba networking software package are related to repeated memory release. Exploiting these vulnerabilities can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser relates to an improper limitation on the visible layers of the user interface. This allows a malicious actor to gain access to confidential data.

The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the C/C++ Libstb library relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of Linux operating system’s AOE kernel driver, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s AOE kernel driver is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Vulnerability in Firefox ESR, Firefox, and Thunderbird email client, related to type conversion errors, allowing attackers to access confidential data

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird is related to type conversion errors caused by the enabled autostart of the private mode. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the decode_status_report() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodestatusreport function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access confidential data, compromise its integrity, and cause...

The vulnerability in the Firefox web browser arises from the improper handling of symbolic links before accessing a file. This allows attackers to gain access to confidential data.

The vulnerability in the Firefox web browser relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability in the Firefox web browser relates to improper handling of memory barriers between protected memory regions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to improper handling of overlaps between protected memory regions. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

PT-2024-28737 · Unknown · Vaultwarden

Name of the Vulnerable Software and Affected Versions: Vaultwarden formerly Bitwarden RS version 1.30.3 Description: An issue was discovered in Vaultwarden, which lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated when a...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, due to insufficient validation of various types of elements, allowing attackers to access confidential data

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of various types of elements. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the Linux operating system’s kernel, related to an incorrect bit shifting of a integer value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the decode_deliver() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodedeliver function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability in the Firefox web browser, related to the absence of a handler that prevents unauthorized access to confidential data, allows attackers to compromise the integrity of such data and cause service interruptions.

The vulnerability in the Firefox web browser is related to the absence of a handler. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Linux operating system’s kernel, related to uncontrolled resource consumption, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the dtSearch component in the Linux operating system’s kernel, which leads to uncontrolled resource consumption, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dtSearch component in the Linux operating system’s kernel is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

ALPINE-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

PT-2024-32131 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data race issue has been resolved in the Linux kernel's workqueue. The issue occurred when flushing a work item for cancellation, and the flush work function knew it exclusively owne...

CVE-2024-45786

This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to gain unauthorized access to sensitive...