Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-27272)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2019-28454)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

The vulnerability of the Skia graphic library in Google Chrome web browsers allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Skia graphic library in Google Chrome’s web browser is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML...

PT-2019-5774 · Debian · Sympa

Name of the Vulnerable Software and Affected Versions: Debian Sympa package versions prior to 6.2.40dfsg-7 Description: The issue is related to the debian/sympa.postinst component of the Sympa package, which sets incorrect permissions for the sympa newaliases-wrapper. This could allow a remote...

PT-2019-2924

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.8 Description The issue is related to the inability to block the axis2-transport-jms class from polymorphic deserialization in the FasterXML Java library for parsing JSON files,...

PT-2019-2926

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.8 Description The issue is related to the FasterXML Java library for parsing JSON files, jackson-databind, and its failure to block the jboss-common-core class from polymorphic deserialization...

PT-2018-19325

Уязвимость пакета linux-astra-modules операционной системы Astra Linux связана с ошибкой проверки прав доступа, приводящей к возможности изменения меток целостности файлов от имени непривилегированного пользователя. Эксплуатация уязвимости может позволить пользователю нарушить целостность данных...

PT-2018-2319

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to an error in the fly-admin-digsig package that leads to incorrect calculation of digital signatures for hidden files. This could allow an attacker to compromise the...

PT-2018-2326

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the acpi-support package in Astra Linux, which lacks support for multi-level mandatory access control. This could allow an attacker to access confidential data,...

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

The vulnerability in the RubyGems package management system arises from improper handling of parameters, allowing users to compromise data integrity.

The vulnerability of the RubyGems package management system is related to the improper handling of HTTP/FTP request parameters, which can lead to incorrect URL formation. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

The vulnerability of the xcf_load_stream function in the GIMP graphics editor, which involves reading beyond the buffer limit, allows attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the xcfloadstream function /xcf/xcf.c in the GIMP graphic editor, GNU Image Manipulation Program, relates to reading beyond the buffer boundaries during string processing, especially when dealing with strings that do not contain the null character '\0'. Exploiting this...

The vulnerability of the IOBit Advanced SystemCare optimization tool, related to privilege management errors, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IOBit Advanced SystemCare optimization tool is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Network Security Services library, related to connection establishment errors, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Network Security Services library collection is related to errors during connection establishment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of the EXTRACTOR_zip_extract_method() method in the GNU Libextractor library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EXTRACTORzipextractmethod method zipextractor.c in the GNU Libextractor library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the sdl-image image loading library, related to memory-related errors, allows attackers to cause service failures or compromise data integrity.

The vulnerability of the sdl-image image loading library is related to memory-related errors that can lead to service failures or the execution of arbitrary code. Exploiting this vulnerability allows a remote attacker to cause a service failure or compromise data integrity using specially crafted...

The vulnerability of the Mercuria version control software, related to access control errors, allows a violator to compromise data confidentiality and integrity.

The vulnerability of the Mercuria version control software is related to errors in access control on the server. Exploiting this vulnerability can allow a malicious actor to compromise data confidentiality and integrity...

The vulnerability of the multimedia library libvorbis, related to the escape from memory buffer reading, allows attackers to cause service failures or compromise data confidentiality and integrity.

The vulnerability of the multimedia library libvorbis is related to an error that causes reading beyond the allocated buffer memory space. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise data confidentiality and integrity through the use of...

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite allows a attacker to cause service failures, gain access to confidential data, or compromise the integrity of that data.

The vulnerability of the UDP protocol implementation in the Net-SNMP software suite is related to memory-related errors during the processing of the UDP protocol. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the `parse_arguments` function in the rsyncd server’s Rsync utility allows users to compromise data integrity.

The vulnerability of the parsearguments function in the rsyncd utility’s options.c file of the rsync server is related to the possibility of using multiple protect-args parameters. This allows attackers to circumvent existing security mechanisms. Exploiting this vulnerability could enable a remot...