The vulnerability of Firefox’s requestPointerLock() and setTimeout() methods allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Firefox browsers, related to errors in security restrictions on testing infrastructure, allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox browsers is related to errors in security restrictions on testing infrastructure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device throug...

The vulnerability of the Authoring sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Authoring sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...

The vulnerability of the Receipts sub-component of the Oracle Receivables component in the Oracle E-Business Suite system, which allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Receipts sub-component of the Oracle Receivables component in the Oracle E-Business Suite system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Change Management sub-component of the Oracle Engineering component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the Timecard sub-component of the Oracle Time and Labor component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Timecard sub-component of the Oracle Time and Labor component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

GStreamer 缓冲区错误漏洞

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer that can be exploited by attackers to potentially expose sensitive information...

CVE-2021-29040

The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused...

PYSEC-2021-204

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.SparseDenseCwiseMul, an attacker can trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. Since the...

CVE-2021-29529

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in tf.rawops.QuantizedResizeBilinear by manipulating input values so that float rounding results in off-by-one error in accessing image elements. This is because the...

Researchers Flag e-Voting Security Flaws

A group of election security experts said after a deep dive into Australia’s electronic voting systems that they have “serious problems” with the accuracy, integrity and privacy with elections run by the Australian Capital Territory ACT Electoral Commission. The team of four cybersecurity...

The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, and SRX5000 with SPC2/SPC3, vSRX, is related to privilege management errors. This vulnerability allows attackers to escalate their privileges.

The vulnerability of JunOS operating systems’ routers, such as SRX1500, SRX4100, SRX4200, SRX4600, and SRX5000 with SPC2, SRX5000 with SPC2/SPC3, and vSRX, is related to privilege management errors. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...

The vulnerability of the Setup sub-component of the Oracle Enterprise Asset Management component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Setup sub-component of the Oracle Enterprise Asset Management component in the Oracle E-Business Suite is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

The vulnerability of the Advanced Global Intercompany sub-component of the Oracle Financials Common Modules in the Oracle E-Business Suite system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Advanced Global Intercompany component of the Oracle Financials Common Modules in the Oracle E-Business Suite system is related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...

The vulnerability of the sub-components “Loan Details” and “Loan Accounting Events” of the Oracle Loans component in the Oracle E-Business Suite, a business automation system, allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the Loan Details and Loan Accounting Events subcomponents of the Oracle Loans component in the Oracle E-Business Suite is related to code errors. Exploitation of this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HT...

The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite automation system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the India Localization sub-component and the Results component of Oracle Payables in the Oracle E-Business Suite system are related to code errors. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP...

The vulnerability of the Process Operations sub-component of the Oracle MES for Process Manufacturing component of the Oracle E-Business Suite allows a intruder to gain unauthorized access to the device.

The vulnerability of the Process Operations sub-component of the Oracle MES for Process Manufacturing component of the Oracle E-Business Suite is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device...

Vulnerability of the sub-component of the French HR component of the Oracle HRMS system, a business automation system from Oracle E-Business Suite. This component allows unauthorized access by attackers to devices.

The vulnerability of the sub-component of the French HR component of the Oracle HRMS system, a business automation system from Oracle’s E-Business Suite, is related to code errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device...