The vulnerability of the HTTP request programming language Python method, related to the lack of mechanisms for encoding or shielding output data, allows attackers to gain access to confidential information and compromise its integrity.

The vulnerability of the HTTP request programming language Python method is related to the lack of mechanisms for encoding or encrypting output data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the Apache HTTP Server’s web server, related to a queue overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Apache HTTP Server web server is related to a heap overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the mod_auth_digest function in the Apache HTTP Server allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the modauthdigest function in the Apache HTTP Server arises from the execution of operations outside the buffer on the stack. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the OverlayFS component arises from the Firejail jailer’s SUID status. This vulnerability stems from insufficient checks on the state of shared resources. As a result, attackers can gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the OverlayFS component in Firejail’s SUID mode is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Python programming language’s pip module relates to deficiencies in pathname restrictions for directories, allowing attackers to compromise data integrity.

The vulnerability of the Python programming language’s pip module is related to shortcomings in pathname restrictions when specifying software for installation via URLs. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the Google Chrome browser’s Payment function, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s Payment function is related to the insufficient implementation of security policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of the urllib2 module in the Python programming language arises from insufficient neutralization of special elements in requests, allowing attackers to compromise data integrity.

The vulnerability of the urllib2 module in the Python programming language is related to the injection of CRLF characters. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of Google Chrome’s full-screen mode, related to insufficient validation of input data, allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to the insufficient implementation of security policies. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

The vulnerability of the Ceph storage system, related to insufficient validation of input data, allows attackers to compromise the integrity of the data.

The vulnerability of the Ceph storage system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the data...

The vulnerability of the solaris_zone module in the Ansible configuration management system arises from the lack of measures to sanitize input data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the solariszone module in the Ansible configuration management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Google Chrome browser extensions, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the FreeBSD operating system’s kernel, related to deficiencies in the authentication mechanism, allows a perpetrator to disable the SMAP protection and compromise the integrity of the protected information.

The vulnerability of the FreeBSD operating system’s kernel is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to disable the SMAP protection and compromise the integrity of the protected information during system calls...

The vulnerability of the Apache HTTP Server web server arises from insufficient validation of input data, allowing attackers to compromise the integrity of protected information.

The vulnerability of the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information from a remote location...

The vulnerability of the runc tool’s configuration allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the configuration of the tool for running isolated containers, “runc,” exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of the Ceph storage system, related to the lack of protective measures for the website structure, allows attackers to compromise the integrity of the data.

The vulnerability of the Ceph storage system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

Security Bulletin: Vulnerability in jackson-databind affects Cloud Pak System (CVE-2020-25649)

Summary Vulnerability in jackson-databind affects Cloud Pak System. IBM Cloud Pak System adressed vulnerabilities. Vulnerability Details CVEID: CVE-2020-25649 DESCRIPTION: FasterXML Jackson Databind could provide weaker than expected security, caused by not having entity expansion secured properl...

CVE-2019-20444

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

Important: kernel

Issue Overview: A vulnerability was found in the bluez, where Passkey Entry protocol used in Secure Simple Pairing SSP, Secure Connections SC and LE Secure Connections LESC of the Bluetooth Core Specification is vulnerable to an impersonation attack where an active attacker can impersonate the...

openSUSE 15 Security Update : postgresql13 (openSUSE-SU-2021:1785-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1785-1 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certai...