3908 matches found
Vulnerability of the utils.c:checkmailpath command in the UNIX shell Zsh: This vulnerability involves allowing an operation to exceed the permissible data buffer size. This allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.
The vulnerability in the utils.c:checkmailpath command of the UNIX shell Zsh involves allowing the execution of commands beyond the data buffer’s allowed limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library arises from the possibility of restoring unreliable data structures in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library is related to improper validation of the data before it is deserialized. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the KVM virtualization subsystem in the file arch/arm64/kvm/guest.c of the Linux operating system allows a attacker to compromise data integrity and cause service failures.
The vulnerability of the KVM virtualization subsystem in the Linux operating system’s arch/arm64/kvm/guest.c file is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...
The vulnerability in the implementation of the WebUSB protocol of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the setuid function in the UNIX command shell Zsh allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the setuid function in the UNIX command shell Zsh is related to incorrect reallocation of the user ID. Exploitation of this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the implementation of the Google Chrome browser’s external protocol allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Google Chrome’s external browser protocol is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the use of memory after it is freed. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the _krb5_extract_ticket() function in the Samba networking software package arises from a lack of authentication mechanism checks. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome’s Blink rendering module is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Zsh shell script interpreter on UNIX systems arises from the lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.
The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Gem Name Handler component in the Bundler’s dependency management tool for Ruby applications relates to a lack of mechanisms for managing code generation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...
The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Google Chrome browser developer tools is related to the operation of operations that go beyond the allowed data buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the directory math/i386/ of the C language library in Linux-based operating systems allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...
The vulnerability of the WebXR component in Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome browser’s WebXR component is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the Kerberos protocol implementation in Samba’s network interaction software packages arises from a lack of privilege control mechanisms and access management tools. This allows attackers to induce service failures.
The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...
The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird programs allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...