Vulnerability of the function SNC_io_parser::read_vertex(); vh->svertices_last(); in the Nef_S2/SNC_io_parser.h file of the Computational Geometry Algorithms library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the function SNCioparser::readVertex in the component NefS2/SNCio parser.h from the CGAL algorithm library is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...

Arbitrary txt files deletion (authenticated)

Description The file sources/export.queries.php can be exploited by any authenticated user to remove arbitrary txt files. If the system administrator configured the base path for the teampass-seckey.txt to be /var/teampass, as shown in the official example, it is possible to remove it causing a...

The vulnerability of the ODBC Agent component of the ColdFusion software platform allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the ODBC Agent component of the ColdFusion software platform relates to the execution of operations beyond the buffer boundaries when processing GIOP packets. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

CVE-2023-21836

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

UBUNTU-CVE-2023-21874

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

Vulnerability of the SNC_io parser function <EW>: read_facet(), fh->twin(). This component is part of the Nef_S2/SNC_io parser.h library. It belongs to the computational geometry algorithm libraries CGAL. It allows an intruder to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the SNCioparser function: readfacet, fh-twin in the NefS2/SNCioparser.h component, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

Vulnerability of SNC_io parser<EW>: read_volume(), ch->shell_entry_objects() in the Nef_S2/SNC_io parser.h component, from the CGAL computational geometry algorithm library. This allows an intruder to access confidential data, compromise its integrity, and cause service failures.

Vulnerability of SNCio parser: ::readvolume. ch-shellentryobjects. The component NefS2/SNCio parser.h is part of the computational geometry library CGAL. This vulnerability is related to unvalidated array indexing. Exploitation of this vulnerability allows an attacker to gain access to confidenti...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_prev() In the component Nef_2/PM_io parser.h, it is part of the CGAL computational geometry library. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s source file Nef2/PMioparser.h is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures throu...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->shalfedges_begin(); component Nef_S2/SNC_io parser.h; libraries of computational geometry algorithms CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCioparser function is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is present in the...

Vulnerability of the SNC_io parser function <EW>: read_facet(), incident_volume(). Component: Nef_S2/SNC_io parser.h library, algorithm library for computational geometry CGAL. This allows an intruder to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

Oracle Java SE Security Update (jan2023) 01 - Linux

Oracle Java SE is prone to a denial of service vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

The vulnerability of the PFE (evo-pfemand) control demon in JunOS Evolved operating systems allows a intruder to trigger a service failure.

The vulnerability of the PFE evo-pfemand control daemon for JunOS Evolved involves an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by executing arbitrary commands through the command line interface, or by sending...

Vulnerability of SNC_io parser<EW>: read_vertex(); vh->sfaces_last(); component Nef_S2/SNC_io parser.h library of computational geometry algorithms CGAL, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of SNCioparser is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is associated with the...

Vulnerability of the SNC_io parser function <EW>::read_edge(), eh->center_vertex() in the Nef_S2/SNC_io parser.h file, part of the Computational Geometry Algorithms library CGAL. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the SNCio parser function ::readedge and eh-centervertex in the NefS2/SNCio parser.h component is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Disruption on High Seas: Shipping Software Hit by Ransomware Attack

By Habiba Rashid The company targeted in the ransomware attack is DNV, a prominent and widely-recognized provider of digital ship management solutions. This is a post from HackRead.com Read the original post: Disruption on High Seas: Shipping Software Hit by Ransomware Attack...

The vulnerability of the nvkm_vmm_pfn_map() function in the Linux operating system’s GPU Nouveau driver allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the nvkmvmmpfnmap function in the Linux kernel’s GPU Nouveau driver is related to improper handling of memory overflow conditions. Exploiting this vulnerability can allow an attacker to cause system failures or gain increased privileges...

The vulnerability of the fs/io_uring.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c component in the Linux kernel operating system is related to the reutilization of freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of SAP SQL Anywhere relational database management systems lies in the lack of protective measures for SQL query structures, allowing attackers to trigger service failures.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the lack of measures taken to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using specially crafted queries, utilizing the ARRAY arra...

FortiOS Flaw Exploited as Zero-Day in Attacks on Government and Organizations

A zero-day vulnerability in FortiOS SSL-VPN that Fortinet addressed last month was exploited by unknown actors in attacks targeting governments and other large organizations. "The complexity of the exploit suggests an advanced actor and that it is highly targeted at governmental or...

The vulnerability of the Model I/O component in operating systems such as Mac OS, iOS, and iPadOS allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the Model I/O component in operating systems such as Mac OS, iOS, and iPadOS lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure using a specially...