Oracle Java SE Libraries GraalVM Enterprise Partial DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform, the Oracle GraalVM Enterprise Edition virtual machine, and the Oracle Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a partial servic...

Generic-array module Type Handling DoS

The vulnerability of the Generic-array module in Rust is related to the increased lifespan of the arr! macro. Exploiting this vulnerability allows a remote attacker to cause service failures...

Faust CosPrim computeSigOutput DoS

The vulnerability of the CosPrim::computeSigOutput function in the cosprim.hh component of the Faust sound synthesis and processing programming language is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

Firefox Thunderbird JIT Data Compromise

The vulnerability of the JIT component in the Firefox web browser and the Thunderbird email client is related to errors during resource release. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Paramiko SSHv2 Information Disclosure

The vulnerability of the SSHv2 protocol implementation by the Paramiko library is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to access confidential information...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

Intel Intra-mode BTI Unauthorized Access

The vulnerability of the Intel microprogrammable processor’s Intra-mode BTI IMBTI implementation is related to errors in parameter processing. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the DumpTrackInfo function in the MP4Box multimedia platform’s command is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

Server MySQL DML DoS

The vulnerability of the Server component: The DML part of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Node Set-value module Type Conversion Confidential Data Compromise

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

Server MySQL DML DoS

The vulnerability of the Server component: The DML mechanism of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

InnoDB DoS

The vulnerability of the InnoDB component in the MariaDB and MySQL database management systems is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failures...

Server MySQL Locking DoS

The vulnerability of the Server component: Locking the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

GitLab Task Tracking Confidential Data Compromise

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability for users to create and track issues for Sentry errors. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integri...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2022-9260)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9260 advisory. - drm/i915: Flush TLBs before releasing backing store Tvrtko Ursulin Orabug: 33835812 CVE-2022-0330 - drm/i915: Reduce locking in execlist command...

Golang net/http/httputil Component Compromise

The vulnerability of the net/http/httputil component in the Golang programming language is related to authentication errors. Exploiting this vulnerability allows an attacker to compromise data integrity...