Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02061)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...

Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02058)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...

Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02060)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...

The vulnerability of the 802.1X component of the Mac OS X operating system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the 802.1X component in the Mac OS X operating system is related to errors in the implementation of the TLS 1.0 protocol. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-02255)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the Deployment subcomponent o...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02269)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. oracle WebCenter Content is one of the enterprise content management solution...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-02271)

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation.Oracle Internet Directory OID is a standards-based LDAP directory component used to centrally store and manage web Service Names. A security vulnerability exists in t...

Oracle Fusion Middleware Directory Traversal Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. Oracle JDeveloper is one of the free integrated development environment IDE components. A...

Unspecified Vulnerability in Oracle Hospitality Simphony (CNVD-2018-02252)

Oracle Hospitality Simphony provides a modern user experience that delivers relevant information to guests through smooth, real-time tiled presentations. An unspecified vulnerability exists in the Security component of Oracle Hospitality Simphony. An attacker could exploit this vulnerability to...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-02256)

Oracle Java SE is the United States Oracle Oracle company's set of standard version of the Java platform for the development and deployment of desktop, server, and embedded devices and real-time environments in the Java application. A security vulnerability exists in the Installer subcomponent of...

Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and Jrockit

Oracle Java SE, Java SE Embedded, and JRockit are products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments; Java SE Embedded is a Java platform for developing...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2018-02213)

Oracle Java SE is a standard version of Oracle's Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. both Java SE and Java SE Embedded are components of Java SE Embedded is a Java platform for embedded systems. Java...

PT-2018-3833

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.7 Description The issue is related to an error in the kodak radc load raw function, specifically with the buf variable, which can cause an out-of-bounds read memory access, leading to a crash. This can be exploite...

The vulnerability of the `psf_binheader_writef` function in the `common.c` file of the `libsndfile` library in the Astra Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data, or cause service failures.

The vulnerability of the psfbinheaderwritef function in the common.c file of the libsndfile library in the Astra Linux operating system is related to a buffer overflow issue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the rmtree and remove_tree functions in the Perl File-Path interpreter allows a hacker to compromise data integrity.

The vulnerabilities of the rmtree and removetree functions in the Perl File-Path interpreter are caused by synchronization errors when using a shared resource due to race conditions between the check time and the use time. Exploiting these vulnerabilities can allow a remote attacker to compromise...

The vulnerability of Google Chrome’s IndexedDB implementation lies in its reliance on memory after it is released. This allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability in the Google Chrome browser’s IndexedDB implementation relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

PT-2017-3730

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the read creator block function, located in plug-ins/common/file-psp.c. This can potentially allow a remote attacker to cause a denial of service,...

PT-2017-3731

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a stack-based buffer over-read in the xcf load stream function, located in app/xcf/xcf.c, which occurs when processing a string without a terminating 0 character. This can potentially...

PT-2017-3729

Name of the Vulnerable Software and Affected Versions: GIMP version 2.8.22 Description: The issue is related to a heap-based buffer over-read in the ReadImage function in plug-ins/common/file-tga.c, specifically when handling RGBA images with unexpected bits-per-pixel values. This can potentially...

The vulnerability of cnPilot R200/201 routers, related to RSA key management errors, allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of cnPilot R200/201 routers is related to RSA key management errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of data...