Magento Commerce Authentication Bypass

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...

Apache Impala Privilege Escalation

The vulnerability of the distributed database management system Apache Impala is related to errors in information encryption. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

OpenClinic shared/view_source.php Code Execution

The vulnerability of the shared/viewsource.php component in the OpenClinic medical record management software is related to authentication errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VMware Carbon Black App Control Auth Bypass

The vulnerability of the VMware Carbon Black App Control server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Trend Micro Home Network Security Resource Leak DoS

The vulnerability of the Trend Micro Home Network Security antivirus protection lies in resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

OpenSSH sshd authfile.c Unauthorized Access

The vulnerability of the authfile.c component of the sshd service in the OpenSSH encryption protection mechanism is related to key management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Spring Framework Privilege Escalation

The vulnerability of the Spring Framework software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to read and rewrite any files at will...

IBM DB2 Privilege Bypass File Overwrite

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to re-record arbitrary files remotely...

Dovecot Resource Management DoS

The vulnerability of the Dovecot mail server is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

IBM DB2 Synchronization Configuration Alteration

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect stems from synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to alter the configuration of DB2...

CVE-2021-20413

IBM Guardium Data Encryption GDE 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212...

AppContainer Kerberos Authentication Bypass

The vulnerability of the Kerberos authentication protocol for the isolated software environment AppContainer on Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the network-based Kerberos authenticati...

OpenSSH Privilege Management

The vulnerability of the OpenSSH cryptographic protection mechanism is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Xen Memory Release DoS

The vulnerability of the Xen hypervisor implementation is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure by using the XSRESETWATCHES request...

Cisco Jabber Resource Management DoS

The vulnerability of the Cisco Jabber software platform is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted XMPP message...

Python Priority Library Resource Management Error

The vulnerability of the Python Priority Library is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

openSUSE: Security Advisory for htmldoc (openSUSE-SU-2021:0882-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:0882-1 Security update for htmldoc

This update for htmldoc fixes the following issues: htmldoc was updated to version 1.9.12: Fixed buffer-overflow CVE-2021-20308 boo1184424 Fixed a crash bug with 'data:' URIs and EPUB output Fixed several other crash bugs Fixed JPEG error handling Fixed some minor issues Removed the bundled...

Group Policy Services Privilege Escalation

The vulnerability of the Windows Group Policy Services relates to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows HTML Platform Bypass

The vulnerability of the Windows HTML Platform component of the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...