The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox ESR browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox ESR is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

Rockwell Automation Stratix Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-04)

Binary data 720288.prm...

Rockwell Automation Stratix 8300 Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-05)

Binary data 720287.prm...

SUSE-SU-2019:2414-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following new features were implemented: - jscSLE-4875: CML New device IDs for CML - jscSLE-7294: Add cpufreq driver for Raspberry Pi - fate321840: Reduce memory required to boot capture kernel while usi...

The vulnerability of the compression function in the Zstandard library allows a hacker to execute arbitrary code.

The vulnerability of the compression function in the Zstandard library for data compression is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

The vulnerability of the Eclipse OpenJ9 virtual machine, related to synchronization errors when using a shared resource, allows a perpetrator to cause memory corruption.

The vulnerability of the Eclipse OpenJ9 virtual machine is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker operating remotely to cause memory corruption...

The vulnerability in the drivers/net/wireless/ath/ath6kl/usb.c file of Linux operating systems, related to pointer arithmetic errors, allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/ath/ath6kl/usb.c file of Linux operating systems is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the Win32k component of the Windows operating system allows a hacker to increase their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the driver ws2ifsl.sys (Winsock) of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the ws2ifsl.sys driver Winsock in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system with administrator privileges through a specially created application...

The vulnerability of the Windows Audio service on Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Windows Audio service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

The vulnerability of the Windows Store Installer component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Store Installer component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Jet Database Engine database management system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system for the Windows operating system exists due to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Graphics Components in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the FortiOS operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...

The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the LibreLogo software module of the LibreOffice office software package allows a hacker to execute arbitrary code on the target system.

The vulnerability of the LibreLogo software module in the LibreOffice office software package stems from errors in URL processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted file...

The vulnerability of the RDP protocol implementation in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the RDP protocol implementation in Windows operating systems is related to errors in processing RDP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted requests...

The vulnerability of NVIDIA GeForce, Quadro, and Tesla software for 3D vision components allows attackers to execute arbitrary code, cause system failures, or gain enhanced privileges.

The vulnerability of 3D vision software from NVIDIA’s GeForce, Quadro, and Tesla products is related to errors in link processing. Exploiting this vulnerability can allow attackers to execute arbitrary code, cause service failures, or gain increased privileges...