Mozilla: Use-after-free during worker shutdown

A flaw was found in Mozilla Firefox and Thunderbird. When running shutdown code for Web Worker, a race condition occurs leading to a use-after-free memory flaw that could lead to an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

PT-2020-6929

Name of the Vulnerable Software and Affected Versions libcroco versions 0.6.13 and earlier Description The issue is related to the cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets css2. It is associated...

The vulnerability of the FreeIPA server, related to improper access control, allows a perpetrator to compromise data integrity.

The vulnerability of the FreeIPA server is related to a configuration error, where multiple network interfaces are present. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the data...

The vulnerability of the parsec inode permission module in the linux-astra-modules package, related to access control deficiencies for non-functional Unix sockets, allows a intruder to compromise data integrity.

The vulnerability of the parsec inode permission module in the linux-astra-modules package is related to deficiencies in access control for non-functional Unix sockets. Exploiting this vulnerability could allow a malicious actor to compromise data integrity from a remote location...

The vulnerability of the Astra Linux Directory Service’s EPPT management system, related to improper data processing, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an initialization processing error. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the FreeIPA server, related to improper access control, allows a perpetrator to compromise data integrity.

The vulnerability of the FreeIPA server is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the pamk5_prompter_krb5 function in the prompt.c library of the libpam-krb5 library, related to a lack of mechanism for checking the size of copied data, allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the pamk5prompterkrb5 function in the prompt.c library of the libpam-krb5 library is related to a lack of mechanism for checking the size of copied data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the Google Chrome audio browser component, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome audio browser component is related to a memory management issue after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the wp_ajax_upload_attachment function in the WordPress content management system allows attackers to compromise data integrity.

The vulnerability of the wpajaxUploadAttachment function in the WordPress content management system is related to improper handling of media files during their upload. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerabilities of the functions Version.fetch_binary() and Version.fetch_source() in the python-apt package installation module allow a attacker to compromise data integrity.

The vulnerability of the Version.fetchbinary and Version.fetchsource functions in the python-apt package installation module is related to the improper verification of the MD5 hash sum only for the uploaded files. Exploiting this vulnerability could allow a remote attacker to compromise data...

The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of many elements of the DAViCal calendar exchange server is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially crafted HTML page...

The vulnerability of the SVGStartElement function in the GraphicsMagick graphics editor involves an operation that goes beyond the buffer boundaries in memory. This allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the SVGStartElement function in the GraphicsMagick graphics editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and...

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the wp_kses_bad_protocol_once function in the WordPress content management system allows a hacker to compromise data integrity.

The vulnerability of the wpksesbadprotocolonce function in the WordPress content management system is related to improper cleaning of URL addresses, which could lead to the reproduction of XSS attacks. Exploiting this vulnerability could allow an attacker to compromise data integrity...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system is related to an error in the reproduction of XSS attacks when previewing draft posts for authorized users. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to a configuration error. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerabilities of the functions Version.fetch_binary() and Version.fetch_source() in the python-apt package installation module allow a attacker to compromise data integrity.

The vulnerability of the Version.fetchbinary and Version.fetchsource functions in the python-apt package installation module is related to an error in downloading files from repositories that do not have a signature. Exploiting this vulnerability could allow a remote attacker to compromise data...

The vulnerability of the V8 component in Google Chrome browsers allows a hacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of Google Chrome’s V8 component relates to access to data without type control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity through a specially created HTML page...

The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of many components of the DAViCal calendar exchange server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the DAViCal calendar exchange server, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.

The vulnerability of the DAViCal calendar exchange server is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially crafted HTML page...