The vulnerability of the Django web application framework, related to a bug in the password restoration mechanism, allows attackers to compromise data integrity.

The vulnerability of the Django web application framework lies in the improper validation of email addresses after converting Unicode characters into registry keys. This allows an attacker to send a reset token. Exploiting this vulnerability could enable a remote attacker to compromise data...

The vulnerability of Xen hypervisors relates to the improper assignment of permissions for critical resources. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors is related to the occurrence of exceptions that are handled without modifying the processor’s level. Some interrupts are inevitably included when an exception is generated. Exploiting this vulnerability can allow a remote attacker to access confidential data,...

The vulnerabilities of the functions p2m_resolve_translation_fault() and p2m_get_entry() in Xen hypervisors, related to insufficient input data validation, allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...

The vulnerability of Google Chrome browser, related to its use after release, allows a violator to gain access to confidential data, compromise the integrity of those data, and cause service interruptions.

The vulnerability of Google Chrome is related to an error in audio handling. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Firefox software, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the Firefox software, specifically Firefox-esr, is related to an error in the insertion of certain tags from the buffer. These tags are incorrectly associated with the namespace rules. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

The vulnerability of the Omnibox address bar in Google Chrome, related to insufficient validation of entered data, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to manipulate data integrity by using a specially created domain name...

The vulnerability of Firefox browser, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of Firefox is related to a security policy error. This error does not apply to the content of XSL stylesheets, provided that the XML file complies with security policies and contains an XSL stylesheet. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome is related to improper implementation of the program during installation. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and also cause service interruptions...

The vulnerability of the build_audio_procunit function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildaudioprocunit function in the Linux kernel stems from the possibility of reading memory beyond the allocated buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

The rendering mechanism in the Google Chrome browser for Android is vulnerable due to a lack of input validation mechanisms. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

The vulnerability of the Python ECDSA cryptographic library, related to improper verification of the cryptographic signature, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Python ECDSA cryptographic library is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of Google Chrome’s mechanism for processing external browser protocols lies in the lack of a mechanism for checking entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of Google Chrome’s mechanism for processing external browser protocols is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to influence the integrity of data by creating a malicious HTML page...

The vulnerability of the data input mechanism in Blink’s Google Chrome browser lies in the lack of a mechanism for verifying the correctness of entered data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors relates to the simultaneous use of common resources. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by using a created domain name...

The vulnerability of the sqlite3WindowRewrite() function in the SQLite database management system, related to insufficient handling of exception states, allows a attacker to compromise data integrity.

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system is related to improper handling of certain syntax analyzers. Exploiting this vulnerability could allow an attacker to compromise data integrity...

PT-2020-3784 · Openresty +2 · Openresty +2

Name of the Vulnerable Software and Affected Versions: OpenResty versions prior to 1.15.8.4 Description: The issue is related to HTTP request smuggling in the ngx http lua subrequest.c component of the OpenResty web server. This is due to inconsistent interpretation of HTTP requests. The...

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird, related to an error in document extraction from DocShell, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software is related to an error in document extraction from DocShell. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...