netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

The vulnerability of the __sleep and __wakeup functions in the Symfony software development and management platform allows attackers to compromise data integrity.

The vulnerability of the sleep and wakeup functions in the Symfony software platform for web application development and management involves the restoration of unreliable information in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2018-14705

In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these...

Authorization

In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these...

CVE-2018-14705

CVE-2018-14705 affects Drobo 5N2 (v4.0.5). The issue is that all optional applications lack authentication/authorization validation, allowing any network-accessing user to interact with and control those applications. Impact is stated as severe risks to availability, confidentiality, and integrit...

The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the EventJobData::execute function in the MariaDB database management system allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Eventjobdata::execute function in the MariaDB database management system’s eventdataobjects.cc file is related to a lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the MyISAM component of the Oracle MySQL database management system allows attackers to compromise data integrity.

The vulnerability of the MyISAM component in the Oracle MySQL database management system is related to the lack of access control mechanisms. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerabilities of the pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts from the postgresql-common package can be exploited by attackers to compromise the integrity of data in PostgreSQL database management systems.

The vulnerability of the pgctlcluster, pgcreatecluster, and pgupgradecluster scripts from the postgresql-common package is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerability of Firefox browsers, related to a network security service error called CertificateVerify, allows attackers to compromise data integrity.

The vulnerability of Firefox is related to a bug in the Network Security Service’s CertificateVerify function. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the vManage web interface of Cisco’s programmable network architecture involves a lack of protection for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of Firefox browsers, related to insufficient validation of input data, allows attackers to gain access to confidential information, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Unspecified Vulnerability in Oracle Fusion Middleware Reports Developer (CNVD-2020-17119)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An unspecified vulnerability exists in Oracle Fusion Middleware Reports...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. An unspecified vulnerability exists in Oracle Hyperion Financial Close Management. An attacker could exploit this...

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the Firefox browser, related to a encoding error of the Latin character “kra”, allows an attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to a coding error in the Latin character “kra”, which can be used to replace the standard character “k” in the address bar. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of the SAP Gateway development environment and the SAP UI5 software platform, which exists due to the lack of measures to neutralize special elements, allows attackers to compromise data integrity.

The vulnerability of the SAP Gateway and the SAP UI5 software platform exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote location...

The vulnerability of Firefox browser, related to incorrect application installation when pressing the ALT + a keys on the keyboard, allows the attacker to compromise data integrity.

The vulnerability of Firefox browsers is related to the incorrect installation of extensions when pressing the ALT + a keys on the keyboard. This allows extensions to be installed without user confirmation. Exploiting this vulnerability can enable an attacker to compromise data integrity remotely...