The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to a deficiency in the mechanism for verifying the source of data. This allows an attacker to compromise the integrity of the data.

The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to a lack of mechanisms for verifying the source of data. Exploiting these vulnerabilities can allow an attacker to compromise the integrity of data...

Vulnerabilities in web browsers Firefox and Firefox ESR, as well as the email client Thunderbird, stem from insufficient checking of unusual or exceptional states, allowing attackers to exploit these vulnerabilities to compromise data integrity.

The vulnerabilities of web browsers Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient checking of unusual or exceptional states. Exploiting these vulnerabilities can allow a remote attacker to compromise data integrity...

PT-2023-5744 · WordPress · Comments Like Dislike

Name of the Vulnerable Software and Affected Versions: Comments Like Dislike plugin for WordPress versions up to, and including, 1.1.9 Description: The issue is related to a missing capability check on the restore settings function, which can be exploited via an AJAX action. This allows...

The vulnerability in the implementation of the QUIC network protocol of Google Chrome allows a attacker to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s QUIC protocol implementation is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information from a remote location...

The vulnerability of the xenvif_get_requests() function in the drivers/net/xen-netback/netback.c module of the Xen kernel in the Linux operating system allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the xenvifgetrequests function in the drivers/net/xen-netback/netback.c module of the Xen kernel in the Linux operating system is related to accessing memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the integrity,...

The vulnerability of the tap_open() function in the drivers/net/tap.c module of the Linux kernel’s TUN/TAP driver allows a attacker to compromise data integrity or gain elevated privileges.

The vulnerability of the tapopen function in the drivers/net/tap.c module of the Linux TUN/TAP driver is related to incorrect initialization of the UID. Exploiting this vulnerability could allow an attacker to compromise data integrity or increase their privileges...

CVE-2023-23347

HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information...

PT-2023-6779 · Аврора · Аврора

Name of the Vulnerable Software and Affected Versions: Аврора affected versions not specified Description: The issue is related to a flaw in the notification mechanism of the Аврора operating system, specifically concerning insufficient permission control for applications sending notifications...

The vulnerability of the software for creating and managing graphical interfaces for user applications on industrial computers (iPC) and personal computers (PC/AT) – GP-Pro EX WinGP – arises from the operation of operations beyond the buffer in memory. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of software for creating and managing graphical interfaces for user applications on industrial computers iPC and personal computers PC/AT like GP-Pro EX WinGP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an...

CVE-2023-38487 HedgeDoc API allows to hide existing notes

HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 can be used to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and is effectively hidden by the new one...

AlmaLinux 8 : samba (ALSA-2023:4328)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4328 advisory. - A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured server signing = required or f...

AlmaLinux 9 : samba (ALSA-2023:4325)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4325 advisory. - A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured server signing = required or f...

The vulnerability of software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities in software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and...

Oracle Linux 9 : samba (ELSA-2023-4325)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4325 advisory. 4.17.5-103.0.1 - Fix memleak in nsswinbindinitgroupsdyn Orabug: 34994509 4.17.5-103 - resolves: rhbz2223600 - Fix trust relationship between workstation and DC ...

The vulnerability of the SAP Web Dispatcher, a database management system for SAP HANA, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SAP Web Dispatcher, a database management system from SAP HANA, is related to logical errors in memory management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Apache Airflow Hive Provider, a network software tool, stems from insufficient validation of input data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Apache Airflow Hive Provider network software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Samba 4.16.x < 4.16.10 / 4.17.x < 4.17.9 / 4.18.x < 4.18.4 Multiple Vulnerabilities

The version of Samba running on the remote host is 4.16.x prior to 4.16.10, 4.17.x prior to 4.17.9, or 4.18.x prior to 4.18.4. It is, therefore, potentially affected by multiple vulnerabilities, including the following: - An out-of-bounds read error was found in Samba due to insufficient length...

The vulnerability of the idt77252_exit() function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the idt77252exit function in the drivers/atm/idt77252.c file of the ATM network driver for the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...