9886 matches found
The vulnerability of the rcp.c component in the NetKit-rsh remote execution program allows a attacker to compromise data integrity.
The vulnerability of the rcp.c component in the NetKit-rsh remote execution program is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity using a dummy file name or the file name “.”...
The vulnerability of the PgBouncer connection pool program in PostgreSQL allows for unauthorized access to sensitive data. By not properly securing the SQL query structure, attackers can gain access to confidential information, compromise its integrity, and cause service failures.
The vulnerability of the PostgreSQL PgBouncer connection pool program lies in the fact that the data received from the initial request message is treated as already decoded data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity,...
Security Vulnerabilities fixed in Thunderbird 102.3.1 — Mozilla
Thunderbird users who use the Matrix chat protocol were vulnerable to an impersonation attack. A malicious server administrator could fake encrypted messages to look as if they were sent from another user on that server. Thunderbird users who use the Matrix chat protocol were vulnerable to an...
PT-2022-5875 · D Link · D-Link Dnr-322L
Name of the Vulnerable Software and Affected Versions: D-Link DNR-322L versions 2.60B15 and earlier Description: The issue is related to a data integrity failure in the 'Backup Config' feature, allowing an authenticated attacker to execute OS level commands on the device. This can be exploited by...
SUSE SLES15: dpdk / dpdk-devel / dpdk-doc / dpdk-examples / dpdk-kmp-default / etc (SUSE-SU-2022:3390-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3390-1 advisory. - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs bsc1202903. -...
Security Bulletin: IBM Tivoli Federated Identity Manager OpenID: signature validation not applied to all attributes (CVE-2012-6359)
Abstract SUMMARY An OpenID message can be modified to contain unsigned attributes that will be accepted by a relying party because Tivoli Federated Identity Manager TFIM does not check that all attributes have been signed. Content VULNERABILITY DETAILS CVE: CVE-2012-6359 DESCRIPTION: An OpenID...
The vulnerability in the findfile.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the LibreOffice office software package, related to errors in the certificate validation process, allows a perpetrator to compromise the integrity of data.
The vulnerability of the LibreOffice office software package is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the Vim text editor’s command line allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2367)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Informix JDBC Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java API Documentation contains a frame injection vulnerability. Content CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation which injects...
Security Bulletin: Unauthorized access exposure in the IBM Tivoli Storage Manager server (CVE-2012-5944)
Abstract Unauthorized access exposure in the IBM Tivoli Storage Manager server. Content VULNERABILITY DETAILS: CVEID:CVE-2012-5944 DESCRIPTION: For systems with multiple users, where individual users are given authorization to perform client operations to the server, it is possible that a user ca...
Security Bulletin: IBM Records Manager Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...
Security Bulletin: IBM Content Classification Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract The Java API documentation contains a frame injection vulnerability. This is a potential issue only if the Java API documentation that is shipped with the product is hosted on a public network. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool...
Security Bulletin: IBM FileNet Records Manager/IBM InfoSphere Enterprise Records/IBM Enterprise Records Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)
Abstract Java API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...
SUSE SLES15: dpdk / dpdk-devel / dpdk-doc / dpdk-examples / dpdk-kmp-default / etc (SUSE-SU-2022:3341-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3341-1 advisory. - CVE-2022-2132: Fixed DoS when a vhost header crosses more than two descriptors and exhausts all mbufs bsc1202903. -...
Cross-Site Scripting: The Real WordPress Supervillain
Vulnerabilities are a fact of life for anyone managing a website, even when using a well-established content management system like WordPress. Not all vulnerabilities are equal, with some allowing access to sensitive data that would normally be hidden from public view, while others could allow a...
The vulnerability of the rollei_load_raw() function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the rolleiloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...
The vulnerability of the verifier functions ebpf in the bpf_map_update_elem and bpf_map_freeze components of the Linux operating system’s kernel/bpf/syscall.c module allows a attacker to compromise data integrity.
The vulnerability of the verifier functions ebpf in the bpfmapupdateelem and bpfmapfreeze components of the Linux operating system’s kernel/bpf/syscall.c file is related to the absence of locking mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity...
The vulnerability of the NetKit-rsh remote execution program, related to deficiencies in access control, allows a perpetrator to compromise data integrity and cause service failures.
The vulnerability of the NetKit-rsh remote execution program lies in the fact that it only performs a superficial check on the object’s return value. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the malicious rsh server...