Ceph Manager volumes Plugin Confidential Data Access

The vulnerability of the “volumes” plugin in the Ceph Manager storage system is related to incorrect authentication. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...

WebKitGTK Use-After-Free

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

WPE WebKit XSS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

Google Chrome Data Compromise

The vulnerability in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

set of tools for Data Compromise

The vulnerability of DevTools components in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

auto-filling components in Microsoft Data Compromise

The vulnerability of the auto-filling components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

Fenced Frames Data Compromise Function

The vulnerability of the Fenced Frames privacy function in Microsoft Edge and Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML pag...

Safe Browsing Service Data Compromise

The vulnerability of the Safe Browsing service in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to compromise data integrity through the use of a malicious file...

PHP Password Hash Insufficient Calculation

The vulnerability of the password verification function in the PHP programming language is related to insufficient calculation of the password hash. Exploiting this vulnerability allows attackers to compromise the integrity of data...

Ceph Storage Authentication Bypass

The vulnerability of the Ceph storage system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

Twisted Web Framework Confidential Data Access

The vulnerability of the Twisted web framework is related to the lack of security measures for website structures. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

WebGL Component Firefox Thunderbird Confidential Data Compromise

The vulnerability of the WebGL component in Firefox web browsers, Firefox ESR, and the email client Thunderbird is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

Downloads Component Microsoft Edge Google Chrome Data Compromise

The vulnerability of the Downloads component in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially crafted HTML page...

WebKitGTK WPE State Management

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to state management errors. Exploiting this vulnerability allows an attacker to compromise data integrity...

HTMLDOC image_load_jpeg pointer arithmetic DoS

The vulnerability of the imageloadjpeg function in the image.cxx component of the HTMLDOC conversion tool is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

WebKitGTK Use-After-Free

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

Google Chrome Skia Graphic Library Data Compromise

The vulnerability of Google Chrome’s Skia graphics library is related to memory-related exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20240918-01

A vulnerability in the CGI::Cookie.parse function of the Ruby programming language is related to incorrect processing of security prefixes in cookie names. security prefixes in cookie names. Exploitation of the vulnerability allows an attacker, acting remotely, to affect data integrity...

HDF5 H5VM_array_fill Buffer Overflow

The vulnerability of the H5VMarrayfill function in the H5VM.c file of the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

OCC API Endpoint SAP Commerce Cloud Unauthorized Access

The vulnerability of the OCC API Endpoint component in the SAP Commerce Cloud platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or compromise the integrity of data...