The vulnerability of Thunderbird email clients, as well as browsers Firefox and Firefox ESR, is related to a buffer overflow exploit that allows an attacker to compromise data integrity.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to a escape character handling error "^". Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in access control, allows a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to improper access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the data...

The vulnerabilities of browsers Firefox, Firefox ESR, and the email client Thunderbird involve memory usage after it is freed. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to the use of a certain data structure after it is freed upon deletion of the list manager currently in use. Exploiting these vulnerabilities allows an attacker who operates remotely to gain access ...

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected...

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service...

The vulnerability of the DemuxInit() function in the VideoLAN VLC media player software allows a hacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the DemuxInit function in the VideoLAN VLC media player software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures by usin...

Unspecified Vulnerability in Oracle Database Server Core RDBMS Component (CNVD-2019-37203)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An unspecified vulnerability exists in the...

Unspecified Vulnerability in Oracle Database Server Core RDBMS Component (CNVD-2019-37211)

Oracle Database Server is a set of relational database management system of Oracle Oracle. The database management system provides data management, distributed processing and other functions.Core RDBMS is one of the relational database core components. An unspecified vulnerability exists in the...

Unspecified Vulnerability in Oracle E-Business Suite Workflow

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Workflow E-Business Suite is one...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37220)

Java SE is short for Java Platform Standard Edition, for the development and deployment of desktop, server, and embedded devices and real-time environment of Java applications. Java SE Embedded is based on Java SE, and provides specific features and support for embedded systems. An unspecified...

The vulnerability of the Special:ChangeEmail function in the software for implementing the hypertext environment of MediaWiki allows a violator to compromise the integrity of the data.

The vulnerability of the Special:ChangeEmail function in the MediaWiki software, which is used for implementing hypertext environments, is related to lack of access control. This allows for the replacement of the email address of the sender. Exploiting this vulnerability could enable a malicious...

The vulnerability in the Networking component of the OpenJDK project’s Java programming language allows attackers to compromise data integrity and violate data confidentiality.

The vulnerability of the Networking component of the OpenJDK Java programming language project is related to the possibility of failing to verify URL addresses. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and violate data confidentiality...

The vulnerability of the ANGLE library in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the ANGLE library in the Google Chrome browser is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

The vulnerability of the Google Chrome browser’s chooser file allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the Google Chrome browser’s chooser file relates to the use of memory after it is freed during rendering. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

The vulnerability of the libavformat library in the Ffmpeg multimedia environment allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libavformat library in the Ffmpeg multimedia environment is related to the lack of checking the return value of the sscanf function. This can lead to the use of uninitialized variables. Exploiting this vulnerability could allow a malicious actor to compromise data...

The vulnerability of the ifilter_bank() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the ifilterbank function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and...

The vulnerability of Google Chrome, related to errors in inheriting security policies for new documents, allows a perpetrator to compromise the integrity of data.

The vulnerability of Google Chrome is related to errors in inheriting security policies for new documents. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the __blk_drain_queue() function in the block/blk-core.c file of the Linux operating system’s kernel allows a attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the blkdrainqueue function in the block/blk-core.c file of the Linux operating system’s kernel is related to the use of this function after error handling. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protecte...

The vulnerability of the SeekIndex() function in the VideoLAN VLC media player software allows a hacker to manipulate data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the SeekIndex function in the VideoLAN VLC media player lies in its division by zero. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures...

The vulnerability of the libzmq library, a library for asynchronous messaging, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libzmq library, a library for asynchronous messaging, is related to stack overflow and reallocation due to memory buffer overflow. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and caus...