10643 matches found
The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.
The vulnerability of Google Chrome is related to improper policy checking during navigation. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...
The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.
The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...
Vulnerability in the library for processing and transforming HTML/XML code fragments: The Ruby loofah library has a vulnerability related to the lack of protection for website structure. This allows attackers to compromise data integrity.
The vulnerability in the library for processing and transforming HTML/XML code fragments in Ruby Loofah is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
The vulnerability of the Service Worker component in Google Chrome’s web browser allows a attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.
The vulnerability of the Service Worker component in Google Chrome browser relates to the use of freed memory areas. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a...
The vulnerability of the load_image function in the libcaca graphics library allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.
The vulnerability of the loadimage function in the libcaca graphics library is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and accessibility...
The vulnerability of Google Chrome, related to the execution of operations beyond the buffer in memory, allows an attacker to gain unauthorized access to protected information and compromise its integrity and accessibility.
The vulnerability of Google Chrome relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...
The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.
The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...
The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.
The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...
CVE-2020-10712
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...
CVE-2020-10712
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...
Design/Logic Flaw
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...
CVE-2020-11620
A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation The following conditions are needed for an exploit, we...
CVE-2020-10712
OpenShift Container Platform (OCP) versions 4.1 and later are affected by CVE-2020-10712, where the image registry operator logs can disclose sensitive information, allowing an attacker with access to those logs to read/write to the storage backing the internal image registry. Impact is primarily...
CVE-2020-10712
A flaw was found in OpenShift Container Platform version 4.1 and later. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highest threat from...
Ansible: code injection when using ansible_facts as a subkey
A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...
Ansible: code injection when using ansible_facts as a subkey
A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...
Ansible: code injection when using ansible_facts as a subkey
A flaw was found in the Ansible Engine. When using ansiblefacts as a subkey of itself, and promoting it to a variable when injecting is enabled, overwriting the ansiblefacts after the clean, an attacker could take advantage of this by altering the ansiblefacts leading to privilege escalation or...
The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.
The vulnerability of Google Chrome’s Chromium user interface is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
The vulnerability of Google Chrome’s browser extension security policies allows attackers to compromise data integrity.
The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...
The vulnerability in the user interface of Google Chrome’s Chromium browser allows a hacker to compromise data integrity.
The vulnerability of the user interface of Google Chrome’s Chromium browser is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially created HTML page...