9693 matches found
PT-2022-6790 · Gstreamer +8 · Gstreamer +8
Name of the Vulnerable Software and Affected Versions: Gstreamer affected versions not specified Description: The issue is related to an integer overflow in the matroskademux element in the bzip decompression function, which can cause a segfault or potentially a heap overwrite, depending on the...
The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication mechanism. This allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...
GHSA-GC43-G62C-99G2 Improper Access Control in MySQL Connectors Java
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J...
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06. An attacker may use the GRUB 2 flaw to hijack and tamper the GRUB verification process. This flaw also allows the bypass of Secure Boot protections. In order to load an untrusted or modified kernel, an attacker would first need to establish access...
CVE-2020-9547
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-10968
A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following...
CVE-2020-10672
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2020-11619
A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, we...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-22260
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
CVE-2022-22260
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
CVE-2022-22260
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
Spoofing
The kernel module has a UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity and availability...
Design/Logic Flaw
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The frame scheduling module has a Use After Free UAF vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality...
CVE-2022-29794
The CVE-2022-29794 entry concerns Huawei/HarmonyOS where a Use-After-Free (UAF) flaw in the frame scheduling module is the root cause. Affected component: HarmonyOS kernel/frame scheduling subsystem. Impact, as stated: data integrity, confidentiality, and availability can be compromised upon expl...
CVE-2022-22260
CVE-2022-22260 is a kernel-module use-after-free vulnerability in Huawei/HarmonyOS reported across multiple sources (NVD, RH, CNVD/CNNVD). The issue is exploited via network access with low attack complexity and no authentication, leading to potential data integrity and availability impact (CVSS ...