10438 matches found
The vulnerability of the Ceph software object storage network, related to authentication procedures that allow attackers to access confidential data, compromise the integrity of those data, and cause service failures.
The vulnerability of the Ceph software object networking system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data, compromise its integrity, and even cause service failures...
The vulnerability of the Midnight Commander file manager, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.
The vulnerability of the Midnight Commander file manager is related to the lack of checks and display of server timestamps. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...
The vulnerability of the Node.js module for processing tar archives using Node-tar lies in the shortcomings of the pathname limitation, which allows attackers to compromise the integrity of the data and cause service failures.
The vulnerability of the Node.js module for processing tar archives using Node-tar is related to improper filtering of the '/' character sequence. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
The vulnerability of the Node.js module for processing tar archives, Node-tar, is related to shortcomings in pathname restrictions for directories. This allows attackers to compromise data integrity and cause service failures.
The vulnerability of the Node.js module for processing tar archives with the Node-tar module is related to the possibility of bypassing the symbolic link checks for directories. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...
The vulnerability of the svn module in the Ansible configuration management system, related to the disclosure of information, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the svn module in the Ansible configuration management system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to access confidential data and compromise its integrity...
The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Ansible configuration management system is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.
The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...
The vulnerability of elements in iframe modules for web page rendering in WebKitGTK and WPE WebKit allows attackers to exploit it to compromise the integrity of web page data. This vulnerability is related to the lack of protection for the structure of web pages.
The vulnerability of elements in iframe modules for displaying web pages in WebKitGTK and WPE WebKit is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through malicious web content...
openSUSE 15 Security Update : python39-pip (openSUSE-SU-2022:0064-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2022:0064-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to...
SUSE SLED15 / SLES15 Security Update : python39-pip (SUSE-SU-2022:0064-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:0064-1 advisory. - CVE-2021-3572: Fixed incorrect handling of unicode separators in git references bsc1186819. Tenable has extracted the...
The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2021-40028
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...
CVE-2021-40028
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...
CVE-2021-40028
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...
Design/Logic Flaw
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...
The vulnerability of the fr-archive-libarchive.c component in the File Roller archiver program allows a perpetrator to compromise the integrity and accessibility of the protected information.
The vulnerability of the fr-archive-libarchive.c component of the File Roller archiver program is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a attacker to compromise the integrity and accessibility of the protected...
CVE-2021-40028
The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity...
CVE-2021-40028
CVE-2021-40028 affects Huawei HarmonyOS eID/SeID module. The vulnerability is an out-of-bounds memory write in the eID/SeID component, with potential impact to data integrity. Documents indicate the issue exists in HarmonyOS’s SeID/eID implementation; no concrete exploit details or versions are p...
EulerOS Virtualization 3.0.2.6 : samba (EulerOS-SA-2021-2883)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in samba. Spaces used in a string around a domain name DN, while supposed to be ignored, can cause invalid DN...
EulerOS Virtualization 3.0.2.6 : rpm (EulerOS-SA-2021-2876)
According to the versions of the rpm packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a...