The vulnerability of the Message and Bulletin components of the Cybozu Garoon data exchange platform, which allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Message and Bulletin components of the Cybozu Garoon data exchange platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of D-Link DIR-825 router microprogramming software, related to the use of weak password requirements, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-Link DIR-825 router microprogramming software is related to the use of weak password requirements. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the filppd.sys driver, a component of the IoControlCode utility in the Twister Antivirus security tool, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the filppd.sys driver, a component of the IoControlCode utility in the Twister Antivirus security tool, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting smartphones and IoT devices to cloud infrastructure. 5G networks are a critical part of all infrastructure layers between the end user and t...

EFB vulnerability in Lufthansa’s Lido eRouteManual

Almost all commercial airlines now use electronic flight bags EFBs to drive efficiency and safety in their operations. We’ve been testing the security of EFBs and their apps, here’s our latest findings. TL;DR Many airlines use Lufthansa Systems Lido eRoute Manual for their EFB approach plates. We...

The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers allows a perpetrator to compromise data integrity.

The vulnerability of the Codesys software suite for industrial automation integrated into Schneider Electric’s programmable logic controllers is related to the disclosure of information in the incorrect data field. Exploiting this vulnerability could allow a malicious actor to compromise the...

The vulnerability of the Apache InLong data integration platform relates to improper control of resource identifiers, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the Apache InLong data integration platform is related to improper control of resource identifiers. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of the Zimbra Collaboration Suite’s corporate email management system lies in the use of certain JVM arguments within the mail server. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the use of certain arguments in the Java Virtual Machine JVM used by the mail server. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibili...

Oracle Linux 7 : python-pip (ELSA-2023-12349)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12349 advisory. 9.0.3-8.0.3 - CVE-2021-3572 Orabug: 35240686 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CVE-2020-25695 - Multiple features escape "security restricted operation" sandbox

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

PT-2023-3647 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.5 iPadOS versions prior to 16.5 watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 Description: The issue is related to errors in state management in the System Settings...

maven: Block repositories using http by default

A flaw was found in maven. Repositories that are defined in a dependency’s Project Object Model pom, which may be unknown to users, are used by default resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that...

more POST-after-PUT confusion

When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...

The vulnerability in the implementation of the NET/ROM network protocol of the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability in the implementation of the NET/ROM network protocol of the Linux operating system is related to the repeated use of the network descriptor socket when a connection has already been established in the nrrelease function within the net/netrom/afnetrom.c module. Exploiting this...

The vulnerability of the Keepalived network traffic balancing system, related to deficiencies in access control, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Keepalived system for balancing network traffic is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the Cipher.update_into function in the Python programming language-based cryptography interpreter allows a attacker to compromise the integrity and accessibility of the output data.

The vulnerability of the Cipher.updateinto function in the Python programming language’s cryptographic library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and accessibility of the...

The vulnerability of the ScalarMult and ScalarBaseMult methods in the Go programming language allows attackers to compromise the integrity of the protected information.

The vulnerability of the ScalarMult and ScalarBaseMult methods in the Go programming language is related to incorrect calculations. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the ext4_xattr_set_entry() function in the fs/ext4/xattr.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the ext4xattrsetentry function in the fs/ext4/xattr.c module of the Linux kernel is related to incorrect calculation of the available storage space for storing attributes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the 389 Directory Server server, related to authentication procedures’ flaws, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the 389 Directory Server catalog service server is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to confidential data and compromise its integrity...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2023-1889)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...