11308 matches found
Linux netfilter ipset bitmap_ip buffer overflow
The vulnerability of the bitmapipuadt function in the net/netfilter/ipset/ipsetbitmapip.c module of the Linux kernel is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux kernel sisfb_search_mode Heap Buffer Overflow
The vulnerability of the sisfbsearchmode function in the drivers/video/fbdev/sis/sismain.c file of the Linux kernel is related to memory allocation beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
SAP NetWeaver AS SQL Injection Vulnerability
SAP NetWeaver AS is a SAP web application server from SAP, Germany. SAP NetWeaver AS suffers from a SQL injection vulnerability that originates from a program that does not properly check for authorization, which could be exploited by an attacker to gain control over data in an Informix database,...
Container Storage Interface CSI Data Compromise
The vulnerability of the Container Storage Interface CSI component in the Nomad application orchestrator is related to improper authentication. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...
Linux kernel dc_state_create_copy() Data Compromise
The vulnerability of the dcstatecreatecopy function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
KUnit Framework Heap Buffer Overflow DoS
The vulnerability of the kunittrycatchrun function in the KUnit framework lib/kunit/try-catch.c in the Linux kernel is related to the reallocation of memory after its deallocation due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to...
Suricata TCP Data Compromise
The vulnerability of the Suricata intrusion detection and prevention system’s TCP protocol implementation is related to the incomplete model of the characteristics of the destination node. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...
Acronis CyberProtect Cloud Data Compromise
The vulnerability of Acronis Cyber Protect Cloud, a cloud-based data protection software for Linux operating systems, stems from the use of cryptographic algorithms that contain vulnerabilities when processing RPM packages. Exploiting this vulnerability could allow attackers to compromise the...
LangChain < 0.2.5 SQLi through Prompt Injection
The version of LangChain installed on the remote host is prior to 0.2.5. It is, therefore, affected by a prompt injection vulnerability in the GraphCypherQAChain class which leads to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS...
Security Bulletin: BM Engineering Lifecycle Optimization - Publishing uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Summary Weak cryptographic hashes cannot guarantee data integrity and should not be used in security-critical contexts. MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesse...
magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
GHSA-GMX7-GR5Q-85W5 magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
Splunk Web Bulletin Messages Module Data Compromise
The vulnerability of the Splunk Web Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality and integrity of...
CVE-2024-56619 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfsfindentry Syzbot reported that when searching for records in a directory where the inode's isize is corrupted and has a large value, memory access outside the folio/page...
JetBrains TeamCity Session Duration
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to incorrect session duration settings. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...
PT-2024-41136 · Ооо "Вебсофт Девелопмент" · Websoft Hcm
Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, нарушить целостность и доступность защищаемой информации...
PIA Core Technology Oracle PeopleSoft Enterprise PeopleTools Data Compromise
The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...
Translate Component Data Compromise
The vulnerability of the Translate component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
LLM Platform Access Control
The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to lack of access control. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information by updating the SAML configuration...