The vulnerability of the Gem::CommandManage module in the RubyGems package management system, due to insufficient protection, allows an attacker to compromise data integrity.

The vulnerability of the Gem::CommandManage module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise data integrity by using a specially crafted escape sequence...

The vulnerability of Samba software, related to access control errors, allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of Samba software is related to errors in access control. Exploiting this vulnerability can allow a perpetrator to compromise data integrity and cause service failures...

The vulnerability of the Gem::UserInteraction module in the RubyGems package management system allows a hacker to compromise data integrity.

The vulnerability of the Gem::UserInteraction module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor to compromise data integrity by using a specially crafted escape sequence...

The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox/Firefox ESR browsers allows a perpetrator to gain unauthorized access to information and compromise its integrity.

The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity...

The vulnerability of Google Chrome browser, related to the insufficient implementation of content security policies, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to the insufficient implementation of content security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension, allowing a malicious actor to compromise data integrity.

The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...

The vulnerability of the Samba package lies in the incorrect path limitation for the restricted access directory, allowing attackers to compromise the integrity and confidentiality of data.

The vulnerability of the Samba package is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and confidentiality of data...

New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users

A group of academics from Ruhr University Bochum and New York University Abu Dhabi have uncovered security flaws in 4G LTE and 5G networks that could potentially allow hackers to impersonate users on the network and even sign up for paid subscriptions on their behalf. The impersonation attack —...

Web exhibition PHP foreign trade enterprise website exists arbitrary file deletion vulnerability

NetShow PHP Foreign Trade Enterprise Website is a premium enterprise website template for small and medium-sized enterprises. Nethub PHP foreign trade enterprise website exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files, the integrit...

Arbitrary File Deletion Vulnerability in eyoucms

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms there is an arbitrary file deletion vulnerability , an attacker can exploit the...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

The vulnerability of the __sleep and __wakeup functions in the Symfony software development and management platform allows attackers to compromise data integrity.

The vulnerability of the sleep and wakeup functions in the Symfony software platform for web application development and management involves the restoration of unreliable information in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2018-14705

In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these...

Authorization

In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these...

CVE-2018-14705

CVE-2018-14705 affects Drobo 5N2 (v4.0.5). The issue is that all optional applications lack authentication/authorization validation, allowing any network-accessing user to interact with and control those applications. Impact is stated as severe risks to availability, confidentiality, and integrit...

The vulnerability of the pg_ctlcluster script in the postgresql-common package allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise the integrity of the data.

The vulnerability of the pgctlcluster script in the postgresql-common package relates to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

The vulnerability of the EventJobData::execute function in the MariaDB database management system allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Eventjobdata::execute function in the MariaDB database management system’s eventdataobjects.cc file is related to a lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

The vulnerability of the MyISAM component of the Oracle MySQL database management system allows attackers to compromise data integrity.

The vulnerability of the MyISAM component in the Oracle MySQL database management system is related to the lack of access control mechanisms. Exploiting this vulnerability allows an attacker to compromise the integrity of data...