The vulnerability of TightVNC’s remote access components to a computer’s desktop allows a intruder to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of TightVNC’s remote desktop access system components is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the `dojox.xmpp.util.xmlEncode` component in the dojox JavaScript library allows a attacker to compromise data integrity.

The vulnerability of the dojox.xmpp.util.xmlEncode component in the dojox JavaScript library is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability of the samba networking interaction software library smbd lies in the lack of privilege control mechanisms and access management tools. This allows attackers to compromise data integrity.

The vulnerability of the samba networking interaction software library smbd is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows an attacker to compromise data integrity...

The vulnerability of the DCE/RPC-based networking interaction package for Samba lies in its information disclosure capabilities, which allow attackers to compromise data integrity.

The vulnerability of the DCE/RPC-based networking communication package for Samba is related to a implementation error at the DCE-RPC level. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

The vulnerability of the signature verification function in Cisco SD-WAN vEdge Router software allows a attacker to compromise the integrity of protected information, as facilitated by the centralized network management system Cisco SD-WAN vManage.

The vulnerability of the signature verification function in Cisco SD-WAN vEdge Router software is related to errors in verifying the cryptographic signatures. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the NTLMSSP implementation of the Samba networking communication package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the mpatch_decode function in the Mercuria version control software allows a hacker to compromise data integrity.

The vulnerability of the mpatchdecode function in the Mercuria version control software is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker who operates remotely to compromise the integrity of data...

The vulnerability of the gdi_SelectObject component in the FreeRDP remote desktop protocol allows a attacker to compromise data integrity.

The vulnerability of the gdiSelectObject component in the FreeRDP remote desktop protocol implementation is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

The vulnerability in the `parse_cookies_header` function of the `utils.rb` module in the Rack web server and web application interface allows a attacker to compromise data integrity.

The vulnerability of the parsecookiesheader function in the utils.rb module of the Rack web server and web application interface is related to the lack of a mechanism for checking input data. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

PT-2021-7756 · Gstreamer +5 · Gstreamer +5

Name of the Vulnerable Software and Affected Versions: GStreamer versions prior to 1.18.4 Description: The issue is related to a buffer overflow in the GStreamer multimedia framework, which can be exploited by a remote attacker using a malformed Matroska file. This exploitation can lead to...

The vulnerability of the `escape_javascript` function in the `javascript_helper.rb` component of the ActionView programming platform for Ruby on Rails allows attackers to compromise data integrity.

The vulnerability of the escapejavascript function in the javascripthelper.rb component of the ActionView programming platform for the Ruby on Rails framework is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow an...

The vulnerability of the libseccomp-golang software, related to the lack of input validation mechanisms, allows attackers to compromise data integrity.

The vulnerability of the libseccomp-golang software is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker operating remotely to compromise the integrity of data...

The vulnerability of the SMB1 protocol implementation in Samba network communication software is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the mpatch_apply function in the Mercuria version control software allows a attacker to compromise data integrity.

The vulnerability of the mpatchapply function in the Mercuria version control tool is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the jqMix method implementation in the dojox library (NPM package) allows an attacker to compromise data integrity.

The vulnerability of the jqMix method implementation in the dojox library NPM package is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the data...

The vulnerabilities of the mem_cache_store.rb and redis_cache_store.rb components of the Ruby on Rails software platform allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the memcachestore.rb and rediscachestore.rb components of the Ruby on Rails software framework is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the ncacn_np function in the Samba networking software package, related to security vulnerabilities, allows attackers to compromise data integrity.

The vulnerability of the ncacnnp function in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

CVE-2021-20179

A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity...

A flaw was found in grub2 in versions prior to 2.06 where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table (SSDT) containing code to overwrite the Linux kernel lockdown variable content directly into memory. The table is further loaded and executed by the kernel defeating its Secure Boot lockdown and allowing the attacker to load unsigned code. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...