9513 matches found
The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.
The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...
The vulnerability of the Impress module in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Impress module in the OpenOffice office package is related to integer overflow caused by polygons created in documents. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the JBoss platform, related to inconsistent interpretation of http requests, allows attackers to compromise the integrity of data.
The vulnerability of the JBoss platform is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...
The vulnerability of the docker-credential-helpers software, related to the re-release of memory, allows a perpetrator to compromise data integrity.
The vulnerability of the docker-credential-helpers tool is related to the reclamation of memory. Exploiting this vulnerability could allow an attacker to compromise data integrity...
The vulnerability of the IPAddressFamily extension in the OpenSSL library allows a hacker to compromise the integrity of data.
The vulnerability of the IPAddressFamily extension in the OpenSSL library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...
The vulnerability of the fs/xfs/xfs_super.c component in the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the fs/xfs/xfssuper.c component in the Linux operating system is related to its use after release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and accessibility...
PT-2020-6431 · Nextcloud +1 · Nextcloud Desktop Client +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Desktop Client versions prior to 3.3.1 Description: The issue is related to the lack of SSL certificate verification when using the "Register with a Provider" flow in the Nextcloud Desktop Client, allowing a remote attacker to impac...
CVE-2020-8184
A flaw was found in rubygem-rack. An attacker may be able to trick a vulnerable application into processing an insecure non-SSL or cross-origin request if they can gain the ability to write arbitrary cookies that are sent to the application. The highest threat from this vulnerability is to data...
CVE-2020-14062
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigatio...
CVE-2020-14061
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigatio...
CVE-2020-14195
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation Th...
PT-2020-5644
Name of the Vulnerable Software and Affected Versions rack versions prior to 2.2.3 rack versions prior to 2.1.4 Description A security issue exists due to a reliance on cookies without proper validation or integrity checks, making it possible for an attacker to forge a secure or host-only cookie...
The vulnerability of the opj_t1_clbl_decode_processor function (openjp2/t1.c) in the OpenJPEG image encoding and decoding library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the opjt1clbldecodeprocessor function in the OpenJPEG image encoding and decoding library is related to writing beyond the buffer boundaries in memory when qmfbid == 1. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the OpenOffice office suite, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the OpenOffice office suite is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the OpenOffice office suite, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the OpenOffice office suite is related to a numerical overflow vulnerability. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...
The vulnerability of the QPRO file in the OpenOffice office suite allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the OpenOffice office suite is related to the execution of operations beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service interruptions...
CVE-2020-12268
An integer overflow was found in jbig2dec, which causes an out-of-bounds read/write in the jbig2imagecompose function. This flaw could potentially result in the execution of code on the system. Applications that use jbig2dec with untrusted input may be vulnerable to this flaw. The highest threat...
CVE-2020-11972
A flaw was found in camel up to versions 2.25.1 and 3.x. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as...
CVE-2020-11973
A flaw was found in camel. Apache Camel RabbitMQ enables java deserialization, by default, without any means of disabling which can lead to arbitrary code being executed. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation...