Security Component Bypass Signature

The vulnerability of the Security component in operating systems such as tvOS, iOS, iPadOS, watchOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass the signature verification...

MediaTek Privilege Escalation

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

MediaTek Privilege Escalation

The vulnerability of MediaTek’s microprogramming software lies in synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: A vulnerability in libcURL affect IBM Rational ClearCase.

Summary libcURL vulnerabilities were disclosed by the libcURL Project. libcURL is used by IBM Rational ClearCase. CVE-2023-23916 Vulnerability Details CVEID:CVE-2023-23916 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused by a flaw in the decompression chain implementation. B...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. The ARM Mali GPU Driver suffers from a resource management error vulnerability that originates from a local, unprivileged user being able to perform incorrect GPU processing operations by exploiting a software race condition...

EMUI Kernel Data Compromise

The vulnerability of the EMUI operating system of HarmonyOS is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to compromise data confidentiality and integrity...

PT-2023-5889

Name of the Vulnerable Software and Affected Versions Mali GPU driver affected versions not specified Description The issue is related to improper GPU processing operations that can be performed by a local non-privileged user, potentially allowing access to limited areas outside of buffer bounds ...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

infinispan: circular reference on marshalling leads to DoS

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

Avalanche mobile device management system Privilege Escalation

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-5184

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...

Security Component Bypass Digital Signatures

The vulnerability of the Security component in iOS, watchOS, iPadOS, and macOS is related to errors in the certificate validation process. Exploiting this vulnerability can allow attackers to bypass digital signature checks...

Atlassian Confluence Server DoS

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to errors in access management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cacti LDAP Auth Bypass

The vulnerability of the cactildapauth function in the network monitoring software Cacti is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

Cisco IOS XR System Check Code Execution

The vulnerability of the Cisco IOS XR operating system’s check function is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code on the base operating system...

IBM Robotic Process Automation Auth Bypass Info Disclosure

The vulnerability of the software interface of the IBM Robotic Process Automation tooling lies in authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information about the vulnerable system...

OpenEMR Authentication HTML Injection

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform HTML injection attacks...

OpenEMR Auth Bypass Privilege Escalation

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...