OpenJDK: IOR deserialization issue in CORBA (8303384)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf; Oracle GraalVM Enterprise Edition: 20.3.11 and 21.3.7. Easily exploitable vulnerability allows...

The vulnerability of the gwcfg_cgi_set_manage_post_data() function in the microprogramming-based industrial Wi-Fi routers developed by Yifan YF325 allows a hacker to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the gwcfgcgisetmanagepostdata function in the microprogrammed industrial Wi-Fi routers from Yifan YF325 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the integrity, availability, and...

The vulnerability of the gwcfg_cgi_set_manage_post_data() function in the microprogramming software for industrial Wi-Fi routers Yifan YF325 allows a hacker to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the gwcfgcgisetmanagepostdata function in the microprogramming-based industrial Wi-Fi routers from Yifan YF325 relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to influence the integrity, availability,...

Ubuntu 16.04 ESM / 18.04 ESM : pip vulnerability (USN-4961-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4961-2 advisory. USN-4961-1 fixed a vulnerability in pip. This update provides the corresponding updates for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : RPM Package Manager vulnerabilities (USN-5273-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5273-1 advisory. Demi M. Obenour discovered that RPM Package Manager incorrectly handled certain files. An attacker could possibly use this issue ...

PT-2023-6332 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.7.2 Description: The issue allows an authenticated user with limited access to some DAGs to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access...

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent module allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the WSGI-server gevent.pywsgi library from Python’s Gevent is related to insufficient validation of executed requests. Exploiting this vulnerability could allow a malicious actor to influence the integrity, availability, and confidentiality of the protected information...

The vulnerability of the file edit_update.php script in the SourceCodester Inventory Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the file editupdate.php script in the SourceCodester Inventory Management System is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2023-9392 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Xen versions affected versions not specified Linux kernel versions affected versions not specified Description: The issue is related to insufficient input validation in the libfsimage component of the Xen hypervisor and Linux kernel. This cou...

CVE-2023-44107

Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity...

The vulnerability of the restoreSettings function in the Comments Like Dislike plugin of the WordPress content management system allows a hacker to compromise the integrity of the data.

The vulnerability of the restoreSettings function in the WordPress content management system’s comments and dislikes module is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise data integrity...

PT-2023-8947 · Mediawiki +2 · Wikibase Extension For Mediawiki +2

Name of the Vulnerable Software and Affected Versions: Wikibase extension for MediaWiki versions prior to 1.35.12 Wikibase extension for MediaWiki versions 1.36.x through 1.39.x before 1.39.5 Wikibase extension for MediaWiki versions 1.40.x before 1.40.1 Description: The issue is related to the...

Lack of validation allows invalid ticks, impacting data integrity.

Lines of code Vulnerability details Impact Function crossTicks updates the tick tracking data when ticks are crossed, but does not validate that exitTick and entryTick are valid and make sense. For example, exitTick could be lower than entryTick. Proof of Concept Here is the relevant code in the...

The vulnerability of the Watchkit application development framework of the HarmonyOS operating system, which allows a hacker to compromise data confidentiality and integrity.

The vulnerability of the Watchkit framework for application development in the HarmonyOS operating system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality and...

The vulnerability of the Ad hoc Transfer Module of the WS_FTP Server allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Ad hoc Transfer Module of the WSFTP Server server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the web interface of the Control Web Panel (CWP), previously known as CentOS Web Panel, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Control Web Panel formerly CentOS Web Panel web interface relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the GetParentControlInfo() function in Tenda AC10U router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GetParentControlInfo function in Tenda AC10U router software lies in the issue of the operation going beyond the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tif_processing_dng_channel_count function in the ImageGear image processing library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tifprocessingdngchannelcount function in the ImageGear image processing library relates to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the delete.php script (located at general/hr/manage/staff_title_evaluation/delete.php) within the Tongda OA automation tool for business processes, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the delete.php script located at general/hr/manage/stafftitleevaluation/delete.php within the Tongda OA automation tool relates to the failure to protect the SQL query structure during the processing of the EVALUATIONID parameter. Exploiting this vulnerability allows an...

The vulnerability of the kernel of the EMUI operating system of HarmonyOS allows attackers to compromise data privacy and integrity.

The vulnerability of the EMUI operating system of HarmonyOS is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to compromise data confidentiality and integrity...