The vulnerability of the command shell of the Google Chrome browser on the Chrome OS allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the command shell of the Google Chrome browser on the Chrome OS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Analytics Web Dashboards component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Analytics Web Dashboard component of the Oracle Business Intelligence Enterprise Edition software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

PT-2023-9663

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.1 iOS versions prior to 16.7.2 and prior to 17.1 iPadOS versions prior to 16.7.2 and prior to 17.1 macOS Sonoma versions prior to 14.1 Description The issue is related to an inconsistent user interface that was...

The vulnerability of the zipOpenNewFileInZip4_64() function in the MiniZip package from the zlib library allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the zipOpenNewFileInZip464 function in the MiniZip package from the zlib library is related to integer overflow when processing file name lengths. Exploiting this vulnerability could allow an attacker to compromise the integrity, accessibility, and confidentiality of the...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the ability to disclose information in error-prone areas of the data. This allows attackers to compromise the integrity of the data.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the disclosure of information in error-prone areas of the data. Exploiting this vulnerability can allow a malicious actor to influence the integrity of the data...

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

PT-2023-9359 · Edk2 +3 · Edk2 +3

Name of the Vulnerable Software and Affected Versions: EDK2 versions affected versions not specified Description: The issue is related to an insecure default configuration in EDK2 that allows the UEFI Shell to be enabled, potentially permitting an OS-resident attacker to bypass Secure Boot. This...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos routers of the MX and SRX series allows attackers to compromise the integrity of protected information.

The vulnerability of SIP application-level ALG operating systems running on Juniper Networks Junos routers of the MX and SRX series lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved routers of the PTX10003 series allows a attacker to compromise data integrity.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved PTX10003 series routers stems from insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote locati...

Advisory ROSA-SA-2023-2251

software: mariadb 10.5.20 OS: ROSA-CHROME packageevrstring: mariadb-10.5.20-1.src.rpm CVE-ID: CVE-2018-2813 BDU-ID: 2019-03456 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Server: DDL component of the MySQL Server database management system is related to a lack of service data protection...

OpenJDK: IOR deserialization issue in CORBA (8303384)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows...

OpenJDK: IOR deserialization issue in CORBA (8303384)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows...

The vulnerability of the gwcfg_cgi_set_manage_post_data() function in the microprogramming software for industrial Wi-Fi routers Yifan YF325 allows a hacker to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the gwcfgcgisetmanagepostdata function in the microprogramming-based industrial Wi-Fi routers from Yifan YF325 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to influence the integrity, availability,...

The vulnerability of the gwcfg_cgi_set_manage_post_data() function in the microprogramming-based industrial Wi-Fi routers developed by Yifan YF325 allows a hacker to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the gwcfgcgisetmanagepostdata function in the microprogrammed industrial Wi-Fi routers from Yifan YF325 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the integrity, availability, and...

Ubuntu 16.04 ESM / 18.04 ESM : pip vulnerability (USN-4961-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4961-2 advisory. USN-4961-1 fixed a vulnerability in pip. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : RPM Package Manager vulnerabilities (USN-5273-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5273-1 advisory. Demi M. Obenour discovered that RPM Package Manager incorrectly handled certain files. An attacker could possibly use this issue ...

PT-2023-6332 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.7.2 Description: The issue allows an authenticated user with limited access to some DAGs to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access...

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent module allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent is related to insufficient validation of executed requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity, availability, and confidentiality of the protected information...

PT-2023-9392 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Xen versions affected versions not specified Linux kernel versions affected versions not specified Description: The issue is related to insufficient input validation in the libfsimage component of the Xen hypervisor and Linux kernel. This cou...