Google Chrome V8 Memory Leak Confidential Data Access

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a memory management error after the memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Git Insufficient Validation Confidential Data Compromise

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

Xen Hypercall Initialise DoS

The vulnerability of the hypercallinitialise function in Xen hypervisors is related to incorrect error handling for the invalid format symbol. Exploiting this vulnerability can allow a malicious actor to cause service failures...

software emulation Heap Buffer Overflow DoS

The vulnerability of the tcpemu function in software for emulating hardware on various QEMU platforms is related to a memory management error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Google Chrome Android Input Validation Data Compromise

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

Firefox Access Resource Disclosure

The vulnerability of Firefox browsers, including Firefox ESR, is related to a type object absence error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Xen Hypervisor Privilege Escalation

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

BIND DNS Synchronization DoS

The vulnerability of the BIND DNS server is related to an error in processing distorted packets, which can lead to out-of-memory situations. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Blink Google Chrome Data Verification

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

Xen Hypervisor Input Validation

The vulnerability of Xen hypervisors relates to the dynamic adaptation of the number of page levels in the IOMMU, in accordance with the size of the address space of the user. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

OPENSUSE-SU-2020:0506-1 Security update for mgetty

This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan bsc1142770. - Fixed a permission issue which have resulted in build failures bsc1168170. This update was imported from the SUSE:SLE-15:Update...

Authentication Bypass

openldap is vulnerable to authentication bypass. The vulnerability exists as a flaw was found in the way OpenLDAP handled authentication failures being passed from an OpenLDAP slave to the master. If OpenLDAP was configured with a chain overlay and it forwarded authentication failures, OpenLDAP...

PHP exif_read_data Information Disclosure

The vulnerability of the exifreaddata function in the PHP programming language is related to the execution of operations that exceed the permissible buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information or cause service failures...

Google Chrome Bluetooth Memory Leak Confidential Data Access DoS

The vulnerability of the Google Chrome browser’s Bluetooth service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

DNS BIND Managed-Keys Resource Exhaustion DoS

The vulnerability of the managed-keys function in the DNS BIND server is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Firefox Thunderbird Buffer Overflow DoS

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

Google Chrome Bluetooth Buffer Overflow DoS

The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ANGLE Component Data Compromise

The vulnerability of the ANGLE browser component in Google Chrome relates to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability could allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidenti...

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012

Application Compatibility Update for Windows Server 2008, Windows 7, and Windows Server 2008 R2: November 2012 INTRODUCTION The Windows Application Compatibility Update is a software update that improves the compatibility experience in the following Microsoft Windows operating systems: Windows...

CVE-2019-19050

A memory leak in the cryptoreportstat function in crypto/cryptouserstat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering cryptoreportstatalg failures, aka CID-c03b04dcdba1...