The vulnerability of the Java Runtime Environment software platform arises from operations that go beyond buffer boundaries in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Java Runtime Environment software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the integrity, accessibility, and confidentiality of information...

The vulnerability of the `stream_get_meta_data` function in the PHP programming language exists due to insufficient checks on input data, allowing attackers to compromise the integrity of the information.

The vulnerability of the streamgetmetadata function in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of information...

The vulnerability of the WebUI component of the Oracle Enterprise Session Border Controller allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Oracle Enterprise Session Border Controller’s WebUI component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through HTTP requests...

Exploit for Code Injection in Vmware Spring_Framework

CVE-2022-22965 2022.04.02 16:44 The POC has been optim...

The vulnerability of the Autofill function implementation in Google Chrome browsers allows attackers to compromise the integrity of the protected information.

The vulnerability of the Autofill function in Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information by using a specially crafted HTML page...

The vulnerability of the Telnet service in JunOS Evolved operating systems allows a perpetrator to influence the integrity and confidentiality of the protected information.

The vulnerability of the Telnet service in JunOS Evolved operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to influence the integrity and confidentiality of the protected information...

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows attackers to compromise privacy, integrity, and accessibility of information.

The vulnerability of Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the Jenkins automation server, related to deficiencies in the authentication mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Apache OpenOffice office software, related to errors during the verification of signed documents, allows a perpetrator to influence the integrity of information.

The vulnerability of the Apache OpenOffice office software is related to errors during the verification of signed documents. Exploiting this vulnerability can allow an attacker to influence the integrity of information...

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS allows attackers to compromise the integrity of protected information.

The vulnerability of the UNIX command shell Zsh operating systems and Mac OS lies in the improper assignment of permissions to files. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the Autofill component in the Microsoft Edge browser allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Autofill component in the Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the macOS operating system, related to deficiencies in access control, allows attackers to compromise the integrity of protected information.

The vulnerability of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to data type mixing errors. These vulnerabilities allow attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to data type mixing errors. Exploiting these...

The vulnerability of the core/admin/profil.php function in the PluXML content management system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the core/admin/profil.php function in the PluXML content management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protecte...

The vulnerability of the Apache Traffic Server web server arises from the improper processing of URL fragments, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the Apache Traffic Server web server is related to the improper processing of URL fragments. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Ruby library for parsing Markdown in HTML Redcarpet, related to the lack of protection for website structure, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Ruby library for parsing Markdown in HTML Redcarpet is related to improper cleaning of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the DNS server Dnsmasq, related to errors in the implementation of security checks for standard elements, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Dnsmasq DNS server lies in the lack of checking for requests with the same name. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Vulnerability of reply_query() function (forward.c): The Dnsmasq DNS server has vulnerabilities related to errors in implementing security checks for standard elements, allowing attackers to compromise the integrity of protected information.

The vulnerability of the replyquery function forward.c: The Dnsmasq DNS server has vulnerabilities related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to deficiencies in the pathname restriction mechanism for the directory. This vulnerability allows an attacker to compromise the integrity of the protected information.

The vulnerability in the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the ContentModelChange function in the software for implementing a hypertext environment like MediaWiki allows attackers to compromise the integrity of the protected information.

The vulnerability of the ContentModelChange function in the MediaWiki software, which is used to implement the hypertext environment, relates to the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the...