CVE-2019-1003029

A flaw was found in the Jenkins Script Security plugin version 1.53. An attacker with Overall/Read permissions is able to escape the sandbox and execute arbitrary code on the Jenkins master JVM. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

The vulnerability in the iOS client application of the Cisco Webex Teams software allows a perpetrator to compromise the integrity of protected information or cause service failures.

The vulnerability in the iOS client application of the Cisco Webex Teams collaboration software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information or cause service failures...

The vulnerability of the software for processing, transforming, and generating documents using Ghostscript, related to type conversion errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to type conversion errors. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the EMC Avamar Client Manager component of the Dell EMC Avamar Server backup system allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the EMC Avamar Client Manager component of the Dell EMC Avamar Server backup system is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a special...

Securing CDN Delivery with TLS at Massive Scale

The growth of HTTPS on the Internet Amidst ever-growing security concerns, providing protected Internet connections is more important than ever. The movement towards an Internet that places more emphasis on data integrity and confidentiality is taking place swiftly. HTTP connections are giving wa...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

Ansible: path traversal in the fetch module

A path traversal flaw was found in ansible. The fetch module allows copying and overwriting files outside of the specified destination in the local ansible controller host by not restricting an absolute path. The main threat from this vulnerability is to data confidentiality and integrity...

CVE-2018-12180

A flaw was found in edk2. When registering a RAM disk whose size is not a multiple of 512 bytes, the BlockIo protocol produced by the RamDiskDxe driver will incur memory read/write overrun. The memory overrun will happen when reading/writing the last block on the RAM disk. The highest threat from...

The vulnerability of the Storage Service component in the Windows operating system allows attackers to enhance their privileges and affect the confidentiality and integrity of the protected information.

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality and integrity of the protected information through a speciall...

flatpak: potential /proc based sandbox escape

A flaw was found in flatpak. In certain special cases, installing flatpak applications and runtimes system-wide may allow an attacker to escape the flatpak sandbox. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

PT-2019-6366 · Gnu +3 · Gnu Binutils +3

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.32 Description: The issue is a heap-based buffer over-read in the d expression 1 function in cp-demangle.c after many recursive calls. This can allow a remote attacker to access confidential data, compromise data...

MongoDB 2.6.x < 2.6.9, 3.0.x < 3.0.14, 3.2.x < 3.2.8 mongod

The version of the remote MongoDB server is 2.6.x prior to 2.6.9, is 3.0.x 3.0.14 or is 3.2.x 3.2.8. It is, therefore, affected by multiple vulnerabilities. - A credentials disclosure vulnerability exists in the PEMKeyPassword, clusterPassword and Windows servicePassword. An unauthenticated local...

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system allows a perpetrator to compromise the integrity of protected data.

The vulnerability of the fly-admin-digsig package in the Astra Linux operating system is related to an error that causes incorrect calculation of the digital signature for hidden files. Exploiting this vulnerability could allow a attacker to compromise the integrity of protected data...

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system allows a perpetrator to compromise the integrity and accessibility of protected data.

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system lies in the deletion of the original file when the copying of it to another partition is canceled. Exploiting this vulnerability allows a remote attacker to compromise the integrity and...

The vulnerability of the acpi-support package in the Astra Linux operating system allows a perpetrator to gain access to confidential data, thereby compromising the integrity and availability of that data.

The vulnerability of the acpi-support package in the Astra Linux operating system is related to the lack of support for hierarchical access control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromising the integrity and availability of that data...

HTTPS Not Detected

HTTPS is a protocol that protects the integrity and confidentiality of data between client and server. HTTPS is highly recommended to protect connections to website regardless of its content. No source data...

CVE-2018-20750

A flaw was found in libvncserver. An incomplete fix for CVE-2018-15127 leaves open an out-of-bounds write vulnerability in code for the file transfer extension. This vulnerability can be remotely exploited. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

CVE-2018-8786

A flaw was found in freerdp in versions prior to version 2.0.0-rc4. An integer truncation that leads to a heap-based buffer overflow in the updatereadbitmapupdate function results in a memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well a...