Cisco Wide Area Application Services Disk-check.sh harcap.sh Privilege Escalation

The vulnerability of the disk-check.sh and harcap.sh scripts within the Cisco Wide Area Application Services Software package is related to errors in the script validation process. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and gain full...

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with...

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with an affine transform and used as a clipping region for drawing...

libsoup get_cookies Code Execution

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...

Sprockets Request Processing Information Disclosure

The vulnerability of the Ruby library for handling web resources, Sprockets, is related to request processing errors. Exploiting this vulnerability allows an attacker to remotely access files located outside of the application’s root directory and gain unauthorized access to protected information...

Oracle MySQL Server Unauthorized Access

The vulnerability of the Server component of the Oracle MySQL database management system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using network protocols...

App Layering/Unidesk: vSphere ESX hosts in Maintenance Mode can unpredictably fail tasks

Tasks for operations on ESX hosts and VMFS datastores fail with errors about hosts losing connection or objects being in the wrong state...

Oracle E-Business Suite Partner Detail Sub-component Data Modification

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

Oracle Marketing User Interface Data Modification

The vulnerability of the User Interface component of the Oracle Marketing component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

Oracle E-Business Suite Partner Detail Sub-component Data Modification

The vulnerability of the Partner Detail sub-component of the Oracle Partner Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

Qemu-NBD Maintenance Failure

The vulnerability of the Qemu-NBD hardware emulation server of QEMU is related to errors during connection establishment. Exploiting this vulnerability allows a remote attacker to cause a service failure by disconnecting the server from the client upon attempting to establish a connection...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

ntpd DoS

The vulnerability of the ntpd daemon, which implements the NTP synchronization protocol, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted packets...

Siemens Sinumerik PLC Exception Handling DoS

The vulnerability of Siemens Sinumerik programmable logic controllers is related to an exception handling error. Exploiting this vulnerability can allow an attacker to cause a failure in the embedded network interface controller or enable the execution of arbitrary code within the network interfa...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows Data Sharing Service Privilege Escalation

The vulnerability of the Windows Data Sharing Service in the Windows operating system is related to file handling errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine database driver for the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...