CVE-2024-45415

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in checkdataintegrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksu...

Firefox Thunderbird Memory Management DoS

The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

Samba Synchronization DoS

The vulnerability of the Samba networking communication package is related to synchronization errors when using a shared resource due to incorrect metadata processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

Shadow account management tool Data Compromise

The vulnerability of the Shadow account management tool is related to insufficient neutralization of certain elements in the query. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Zabbix universal monitoring system Data Compromise

The vulnerability of the Zabbix universal monitoring system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

Firefox Memory Barrier Disclosure

The vulnerability in the Firefox web browser is related to improper handling of overlaps between protected memory regions. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Nano Temporary File Error

The vulnerability of the Nano text editor is related to errors in processing temporary files. Exploiting this vulnerability can allow an attacker to compromise the integrity of the data...

WebKitGTK WebKit Inheritance Permissions Error

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to errors with inherited permissions. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

WebKitGTK WebKit XSS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

Firefox Confidential Data Handler Data Compromise

The vulnerability in the Firefox web browser is related to the absence of a handler. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service interruptions...

FFmpeg libavutil mem.c Heap Buffer Overflow DoS

The vulnerability of the avmalloc function in the libavutil/mem.c component of the FFmpeg multimedia library is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

Zabbix universal monitoring system Confidential Data Access

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

Firefox TLS Certificate Validation

The vulnerability in the implementation of the TLS protocol in the Firefox web browser is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

Firefox File Download Restriction

The vulnerability in the Firefox web browser relates to the lack of restrictions on file downloads. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service interruptions...

Firefox Data Compromise

The vulnerability in the Firefox web browser is related to the lack of security measures for protecting the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service interruptions...

Runc Race Condition Data Compromise

The vulnerability of the Runc container launch tool is related to the state of the race, which allows for the tracking of links. Exploiting this vulnerability could enable a hacker to compromise the integrity of data...

Firefox Improper Layer Limitation Confidential Data Compromise

The vulnerability in the Firefox web browser is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a remote attacker to access confidential data and compromise its integrity...

CBL Mariner 2.0 Security Update: shim / shim-unsigned-aarch64 / shim-unsigned-x64 (CVE-2023-40548)

The version of shim / shim-unsigned-aarch64 / shim-unsigned-x64 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40548 advisory. - A buffer overflow was found in Shim in the 32-bit system. The...

CVE-2024-4465

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with reporting privileges learns how to create a specific application request, they might be able to make...

CVE-2024-4465

An access control vulnerability was discovered in the Reports section due to a specific access restriction not being properly enforced for users with limited privileges. If a logged-in user with reporting privileges learns how to create a specific application request, they might be able to make...