Mozilla Firefox Push API Unauthorized Access

The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

SELinux DoS

The vulnerability of SELinux’ access control system in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Oracle BI Publisher Administration Unauthorized Access

The vulnerability of the Administration component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to read, modify, add, or delete data...

Apache Tomcat Resource Consumption DoS

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted sequence of HTTP/2 requests...

web interface of for Code Execution

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

web interface of for Code Execution

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

web interface of for Code Execution

The vulnerability of the web interface of microprogramming software for Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

EulerOS 2.0 SP3 : dovecot (EulerOS-SA-2021-1064)

According to the versions of the dovecot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Dovecot before 2.3.11.3, uncontrolled recursion in submission, lmtp, and lda allows remote attackers to cause a denial of service resource...

ASP.NET Core DoS

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

OPENSUSE-SU-2021:0079-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1179802 bsc1180155. Non-security issues fixed: - Fixes an issue when check in legacy collection reaches end. bsc1179139 - Fixes an...

X Window System Xorg-server Heap Buffer Overflow DoS

The vulnerability of the ProcXIChangeHierarchy function in the X Window System Xorg-server is related to integer overflows. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

fly-qdm Graphical Interface Confidential Data Access

The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in the memory of Firefox web browsers, Firefox ESR, and the Thunderbird email client relates to the execution of operations beyond the allowed boundaries of the data buffer. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its...

Firefox ESR Thunderbird Parsing Module Data Authenticity Issue

The vulnerability of the Firefox ESR and Firefox web browsers’ parsing module, as well as the Thunderbird email client, is related to a lack of mechanisms for verifying data authenticity. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability of the Firefox, Firefox ESR, and Thunderbird software is related to the execution of operations beyond the acceptable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

fly-wm Authentication Bypass

The vulnerability of the fly-wm window manager is related to the password prompt displayed during session blocking. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

PostgreSQL Unreliable Search Path

The vulnerability of the PostgreSQL database management system is related to an unreliable search path mechanism. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

Net-SNMP Privilege Escalation

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

OpenSSL Uncontrolled Resource Consumption DoS

The vulnerability of the OpenSSL library used by the WildFly server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain full access to the system...

Firefox browsers DoS

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...