The vulnerability of the OpenSearch software package, related to improper storage of permissions, allows a violator to compromise data integrity.

Vulnerability of the OpenSearch software package, related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise data integrity...

ROS-20231121-03

OpenSearch software package vulnerability related to improper permission saving. Exploitation exploitation of the vulnerability could allow an attacker to affect data integrity...

The vulnerability of the nft_trans_gc_catchall() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the nfttransgccatchall function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ptmcast.exe executable software used for designing, operating, and maintaining technological installations like COMOS allows a perpetrator to compromise data confidentiality and integrity.

The vulnerability of the ptmcast.exe executable software used for the design, operation, and maintenance of COMOS technological installations lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the...

The vulnerability of the software for the design, operation, and maintenance of COMOS technological installations stems from lack of access control measures, allowing attackers to compromise data confidentiality and integrity.

The vulnerability of COMOS’ software for the design, operation, and maintenance of technological installations is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of data...

The vulnerability of the Server Message Block (SMB) network protocol software used in the design, operation, and maintenance of COMOS technical installations stems from lack of access control mechanisms. This allows attackers to compromise data confidentiality and integrity.

The vulnerability of the Server Message Block SMB network protocol software used for designing, operating, and maintaining technological installations like COMOS is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise data...

CVE-2021-46758

Insufficient validation of SPI flash addresses in the ASP AMD Secure Processor bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity...

libfastjson: integer overflow and out-of-bounds write via a large JSON file

A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code

A flaw was found in WebKitGTK. An attacker may be able to execute JavaScript code to trigger Remote Code Execution, resulting in a high impact on data confidentiality, integrity, and system availability...

Advisory ROSA-SA-2023-2292

Software: git 2.39.3 OS: ROSA Virtualization 2.1 packageevrstring: git-2.39.3-1.rv3 CVE-ID: CVE-2022-39253 BDU-ID: 2023-06647 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Git for Windows distributed version control system is related to a lack of service data protection. Exploitation of the...

The vulnerability in the `extensions/libxt_tcp.c` component of the Iptables network interface control system allows a attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the extensions/libxttcp.c component of the Iptables network interface control system is related to insufficient input data validation. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the GNU C Library’s system library, related to the allocation of unlimited memory, allows attackers to compromise data integrity.

The vulnerability of the GNU C Library is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the `clntudp_call` function in the `sunrpc/clnt_udp.c` component of the GNU C Library allows a attacker to compromise data integrity.

The vulnerability of the clntudpcall function in the sunrpc/clntudp.c component of the GNU C Library library relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the Dovecot mail server arises from improper elimination of sequence numbers of control and meta-characters, allowing attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Dovecot mail server is related to improper elimination of sequence control and meta-characters. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

The vulnerability of the JWT implementation in Python PyJWT, related to the use of cryptographic algorithms containing defects, allows attackers to compromise the integrity of the data.

The vulnerability of the JWT implementation in Python PyJWT is related to the absence of blocking for certain formats of the secret key. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

The vulnerability of the XvdiSelectVideoNotify function in the X Window System X.Org Server, and the Wayland protocol for X.Org XWayland, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XvdiSelectVideoNotify function in the X Window System X.Org Server, and the Wayland protocol for X.Org, is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cau...

The vulnerability of the getaddrinfo function in the GNU C Library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the getaddrinfo function in the GNU C Library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the server software HAProxy, related to deficiencies in HTTP request processing, allows attackers to compromise data integrity.

The vulnerability of the server software HAProxy is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise data integrity from a remote location...

The vulnerability of the Shadow account management tool is related to insufficient checking of the status of shared resources. This allows a perpetrator to compromise data integrity and also cause service interruptions.

The vulnerability of the Shadow account management tool is related to insufficient checks on the status of the shared resource. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...