The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Network Security Services library, related to connection establishment errors, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Network Security Services library collection is related to errors during connection establishment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of the IOBit Advanced SystemCare optimization tool, related to privilege management errors, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IOBit Advanced SystemCare optimization tool is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the `parse_arguments` function in the rsyncd server’s Rsync utility allows users to compromise data integrity.

The vulnerability of the parsearguments function in the rsyncd utility’s options.c file of the rsync server is related to the possibility of using multiple protect-args parameters. This allows attackers to circumvent existing security mechanisms. Exploiting this vulnerability could enable a remot...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Mercuria version control software, related to access control errors, allows a violator to compromise data confidentiality and integrity.

The vulnerability of the Mercuria version control software is related to errors in access control on the server. Exploiting this vulnerability can allow a malicious actor to compromise data confidentiality and integrity...

The vulnerability of the sdl-image image loading library, related to memory-related errors, allows attackers to cause service failures or compromise data integrity.

The vulnerability of the sdl-image image loading library is related to memory-related errors that can lead to service failures or the execution of arbitrary code. Exploiting this vulnerability allows a remote attacker to cause a service failure or compromise data integrity using specially crafted...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

Nextcloud: Retrieval and alteration of exposed media on Android Oreo

Good afternoon. Any media downloaded from the cloud server within the Android app is subject to third party modification and server re-upload without explicit user consent. This happens at least on Android Oreo, as data is automatically stored on shared folder...

IBM Security Access Manager Application Control Bypass Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. An application control bypass vulnerability exists in IBM Security Access Manager...

Input validation

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017...

CVE-2018-1813

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017...

CVE-2018-1813

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017...

CVE-2018-1813

CVE-2018-1813 affects IBM Security Access Manager Appliance (versions 9.0.1.0–9.0.5.0). Description indicates the vulnerability stems from incomplete blacklisting during input validation, enabling attackers to bypass application controls and directly impact system and data integrity. Connected IB...

The vulnerability of the CUPS printing server lies in its ability to execute arbitrary IPP commands, allowing users to compromise the integrity of data.

The vulnerability of the CUPS printing server relates to the ability to execute arbitrary IPP commands. Exploiting this vulnerability allows a malicious actor to compromise data integrity by sending POST requests to the CUPS service along with reattached DNS information...

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to a race in the signal processing mechanism, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to the situation of signal processing. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

PT-2018-3067 · Freeware +1 · Faad2 +1

Name of the Vulnerable Software and Affected Versions: Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.1 Description: The issue is related to a NULL pointer dereference in the ifilter bank function. This could potentially allow an attacker to impact data integrity, gain unauthorized access to...

curl: Use of connection struct after free

A use-after-free flaw was found in libcurl. When invoking curleasyperform after cleaning up a multi session, an application can be tricked into using libcurl to connect to a malicious server, allowing an attacker to potentially execute arbitrary code. The highest threat from this vulnerability is...

Grocery crud 1.6.1 - search_field SQL Injection

Grocery crud 1.6.1 - searchfield SQL Injection Exploit Title: Grocery crud 1.6.1 - 'searchfield' SQL Injection Google Dork: n/a Date: 2018-11-05 Exploit Author: Loading Kura Kura Vendor Homepage: https://www.grocerycrud.com/ Software Link: https://www.grocerycrud.com/downloads Version: 1.6.1 Test...

The vulnerability of the LIBXML_ATTR_FORMAT function in the libxml2 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the LIBXMLATTRFORMAT function in the libxml2 library HTML parser.c is related to the use of an uncontrolled format string. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...