Lucene search
+L

9925 matches found

OpenVAS
OpenVAS
added 2022/04/13 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2022-1371)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.03293EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.15 views

The vulnerability of the Git-based software platform’s GraphQL component allows a hacker to influence the integrity of data during collaborative code development on GitLab.

The vulnerability of the GraphQL component of the software platform based on Git for collaborative code development on GitLab is related to the lack of checking for the presence of the X-CSRF-Token header in GET requests. Exploiting this vulnerability allows an attacker to compromise data integri...

7.1CVSS6.8AI score0.00893EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.10 views

The vulnerability of the software for interacting with servers via CURL is related to deficiencies in the algorithm for calculating the checksum. This allows a hacker to compromise the integrity of the data.

The vulnerability of the software for interacting with servers via CURL is related to the storage of dangerous files. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

7.1CVSS6.4AI score0.04332EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

4.3CVSS5.6AI score0.00819EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.16 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication procedures, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

5.4CVSS6AI score0.00818EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.15 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functional decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder relates to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.15 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.00949EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.10 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.4AI score0.71787EPSS
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
added 2022/04/13 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-1386)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.9AI score0.00321EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

Vulnerability of the API component: A software platform in Node.js that allows attackers to compromise data integrity

The vulnerability of the API component in the Node.js software platform is related to insufficient checking of the rejectUnauthorized value. Exploiting this vulnerability allows an attacker to compromise data integrity...

5.3CVSS6.5AI score0.1473EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.16 views

The vulnerability of Google Chrome, related to improperly implemented security checks for standard elements, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

7.6CVSS6.3AI score0.0079EPSS
SaveExploits1References9Affected Software5
OSV
OSV
added 2022/04/11 8:15 p.m.11 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00571EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2022/04/11 8:15 p.m.14 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00571EPSS
SaveExploits0References3Affected Software3
NVD
NVD
added 2022/04/11 8:15 p.m.29 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS0.00571EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/11 8:15 p.m.26 views

Design/Logic Flaw

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

5CVSS7.5AI score0.00571EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2022/04/11 7:38 p.m.36 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.7AI score0.00571EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/11 7:38 p.m.106 views

CVE-2022-22257

CVE-2022-22257 affects Huawei HarmonyOS through the customization framework, with root cause described as improper permission control/improper privilege restrictions. Multiple connected sources (NVD, Red Hat, CNVD and others) describe potential impact to data/system integrity but do not provide p...

7.5CVSS7.5AI score0.00571EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.13 views

The vulnerability of the mbedtls_ssl_read function in TLS and SSL implementations allows a attacker to compromise data integrity.

The vulnerability of the mbedtlssslread function in TLS and SSL protocols is related to the absence of buffer zeroing. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.8CVSS7.4AI score0.0157EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

4.3CVSS5.6AI score0.00662EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder