9521 matches found
The vulnerability of the Container Storage Interface (CSI) component in the Nomad application orchestrator allows a attacker to influence the integrity of the protected information.
The vulnerability of the Container Storage Interface CSI component in the Nomad application orchestrator is related to improper authentication. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...
The vulnerability of the Suricata intrusion detection and prevention system’s TCP protocol allows attackers to compromise the integrity of the protected information.
The vulnerability of the Suricata intrusion detection and prevention system’s TCP protocol implementation is related to the incomplete model of the characteristics of the destination node. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...
The vulnerability of the kunit_try_catch_run() function in the KUnit framework (lib/kunit/try-catch.c) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the kunittrycatchrun function in the KUnit framework lib/kunit/try-catch.c in the Linux kernel is related to the reallocation of memory after its deallocation due to concurrent access to resources race condition. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the `dc_state_create_copy()` function in the `drivers/gpu/drm/amd/display/dc/core/dc_state.c` file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dcstatecreatecopy function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c file of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
The vulnerability of the Acronis CyberProtect Cloud data protection software for Linux operating systems allows attackers to compromise the integrity of the protected information.
The vulnerability of Acronis Cyber Protect Cloud, a cloud-based data protection software for Linux operating systems, stems from the use of cryptographic algorithms that contain vulnerabilities when processing RPM packages. Exploiting this vulnerability could allow attackers to compromise the...
LangChain < 0.2.5 SQLi through Prompt Injection
The version of LangChain installed on the remote host is prior to 0.2.5. It is, therefore, affected by a prompt injection vulnerability in the GraphCypherQAChain class which leads to SQL injection. This vulnerability permits unauthorized data manipulation, data exfiltration, denial of service DoS...
Security Bulletin: BM Engineering Lifecycle Optimization - Publishing uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Summary Weak cryptographic hashes cannot guarantee data integrity and should not be used in security-critical contexts. MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesse...
magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
GHSA-GMX7-GR5Q-85W5 magic-crypt uses insecure cryptographic algorithms
This crate uses a number of cryptographic algorithms that are no longer considered secure and it uses them in ways that do not guarantee the integrity of the encrypted data. MagicCrypt64 uses the insecure DES block cipher in CBC mode without authentication. This allows for practical brute force a...
The vulnerability of the Splunk Web Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to influence the confidentiality and integrity of the protected information.
The vulnerability of the Splunk Web Bulletin Messages module in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality and integrity of...
CVE-2024-56619 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfsfindentry Syzbot reported that when searching for records in a directory where the inode's isize is corrupted and has a large value, memory access outside the folio/page...
The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity, related to incorrect session duration, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to incorrect session duration settings. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...
PT-2024-41136 · Ооо "Вебсофт Девелопмент" · Websoft Hcm
Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, нарушить целостность и доступность защищаемой информации...
The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...
The vulnerability of the Translate component in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Translate component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the platform for monitoring, managing, and improving LLM applications, related to lack of access control, allows attackers to influence the confidentiality and integrity of the protected information.
The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to lack of access control. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information by updating the SAML configuration...
The vulnerability of the platform for monitoring, managing, and improving LLM applications, related to bypassing authentication using a user-controlled key, allows attackers to influence the integrity and confidentiality of protected information.
The vulnerability of the platform for monitoring, managing, and improving LLM applications involves bypassing authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to influence the integrity and confidentiality of protected information by manipulating the...
ROS-20241220-01
A vulnerability in the password verification function of the PHP programming language is related to insufficient calculation of the password hash. password hash. Exploitation of the vulnerability allows an attacker to affect data integrity...
The vulnerability of Veeam Backup & Replication’s virtual and physical systems arises from the limited ability to restrict the path name to the restricted access directory. This allows attackers to compromise the integrity and accessibility of the protected information.
The vulnerability of Veeam Backup & Replication virtual and physical systems is related to the limited ability to access the directory. Exploiting this vulnerability can allow a malicious actor to influence the integrity and accessibility of the protected information...