The vulnerability of the CUPS printing server, related to authentication errors, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the CUPS printing server is related to the SetEnv and PassEnv directives. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

The vulnerability of the mod_auth_mellon authentication module in the Apache HTTP Server, related to character conversion errors involving the “\” character, allows attackers to redirect users to malicious websites.

The vulnerability of the modauthmellon authentication module in the Apache HTTP Server is related to a character conversion error involving the “\” symbol. Exploiting this vulnerability could allow an attacker to redirect users to a malicious website remotely...

Vulnerability in the Server component: The Oracle MySQL database management system’s options, which allow attackers to gain unauthorized access to server functions and data.

The vulnerability in the Oracle MySQL server component is related to user access control errors. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the server’s functions and data...

Open-Xchange: Two heap use-after-free errors in IMAP operations

Summary ======= We’ve found two heap use-after-free errors, one in lib-storage/index/index-storage.c: indexcopycachefields and one in lib-index/mail-index-sync-update.c: mailindexsyncrecordreal. Error 1: indexcopycachefields ---------------------------------------------- This error involves two...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to gain access to protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to configuration errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using a specially crafted request...

The vulnerability of the Dovecot mail server, related to authentication errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dovecot mail server is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Internet Explorer’s JavaScript script handlers allows attackers to gain unauthorized access to protected information.

The vulnerability of Internet Explorer JavaScript script handlers is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Vulnerability of the graphical components of the Microsoft Office software suite, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Office’s graphical components is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object processing errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Certificate Management Server component in the Network Security Services library allows a perpetrator to trigger a service failure.

The vulnerability of the Certificate Management Server CMS component in the NSS library set is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the IOleCvt interface in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the IOleCvt interface in Windows operating systems is related to errors in displaying ASP pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the sk_clone_lock function in Linux and Android operating systems allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the skclonelock function in Linux and Android operating systems is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Vulnerability of JavaScript script handlers and VBScript in Windows operating systems, allowing attackers to execute arbitrary code

The vulnerability of JavaScript and VBScript handlers in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IBM Business Automation Workflow and IBM Business Process Manager Information Disclosure Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...