The vulnerability of the EcoStruxure Process Expert automation system, related to bypassing the authentication process, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EcoStruxure Process Expert automation system is related to the bypassing of the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the IBM Robotic Process Automation software configuration allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the IBM Robotic Process Automation software configuration is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

EulerOS Virtualization 3.0.2.2 : glibc (EulerOS-SA-2023-1254)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thre...

EulerOS Virtualization 3.0.2.2 : rpm (EulerOS-SA-2023-1306)

According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...

OpenJDK: soundbank URL remote loading (Sound, 8293742)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Sound. Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploi...

OpenJDK: soundbank URL remote loading (Sound, 8293742)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Sound. Supported versions that are affected are Oracle Java SE: 8u351, 8u351-perf, 11.0.17, 17.0.5, 19.0.1; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4 and 22.3.0. Difficult to exploi...

Vulnerability of the SNC_io parser function <EW>: read_edge(), eh->incident_sface() in the Nef_S2/SNC_io parser.h component. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCioparser function lies in the use of readedge and eh-incidentsface functions. This vulnerability is associated with unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even caus...

The vulnerability of the HTTP server software implementation in HAProxy arises from insufficient input validation, allowing attackers to compromise data integrity.

The vulnerability of the HTTP server software of HAProxy is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_next(). This component is located in the Nef_2/PM_io parser.h file, which belongs to the CGAL algorithm library. It allows an attacker to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s readhedge method is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a speciall...

TLS Connection Cryptographic Protocol Vulnerabilities

TLS is the backbone of encryption and key to ensuring data integrity, but its misconfiguration can leave your system vulnerable. Read on to discover how to secure your TLS connection and arm your organization against malicious attacks...

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->center_vertex() in the Nef_S2/SNC_io parser.h file, part of the Computational Geometry Algorithms library CGAL. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readedge and eh-centervertex in the NefS2/SNCio parser.h component is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2023-21882

Removed by vendor...

CVE-2023-21857

The CVE-2023-21857 entry describes a vulnerability in Oracle E-Business Suite’s Oracle HCM Common Architecture, specifically the Auomated Test Suite component. Affected are Oracle E-Business Suite versions 12.2.3 through 12.2.12. The issue is caused by insufficient input validation in the Auomate...

The vulnerability of the OWASP Zed Attack Proxy, a security scanner for web applications, arises from improper verification of certificate authenticity. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the OWASP Zed Attack Proxy web application scanner is related to improper verification of certificate authenticity. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

CVE-2023-0049

A flaw was found in vim, which is vulnerable to an out-of-bounds read in the buildstlstrhl function. This flaw allows a specially crafted file to cause information disclosure, data integrity corruption, or crash the software. Mitigation Do not run vim with -s scriptin on untrusted scripts...

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2023-1064)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In iconvdata/iso-2022-jp-3.c in the GNU C Library aka glibc 2.34, remote attackers can force iconv to emit a spurious '\0' charact...

NVIDIA CUDA Toolkit < 11.8 Buffer Overflow Vulnerability

NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which m...

The vulnerability of the Malwarebytes antivirus protection lies in the incorrect handling of the link before accessing the file. This allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Malwarebytes antivirus protection tool is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a hacker to compromise the integrity and accessibility of the protected information through a specially created link...

The vulnerability of the sec_store component in the Android operating system of Samsung devices with Qualcomm chipsets allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the secstore component in the Android operating system on Samsung devices with Qualcomm chipsets SDM660, MSM8998, SDM845, SM8150 arises from the loss of precision for a large number of operations. Exploiting this vulnerability allows an attacker to compromise the...